CVE-2022-47008 — Missing Release of Memory after Effective Lifetime in Binutils

CWE-401 — Missing Release of Memory after Effective Lifetime CWE-400 — Uncontrolled Resource Consumption10 documents8 sources

Severity

5.5MEDIUMNVD

EPSS

0.0%

top 97.44%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

GNU Binutils

Timeline

PublishedAug 22

Latest updateJan 15

Description

An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶Debiangnu/binutils< 2.38.50.20220627-1+2

▶NVDgnu/binutils2.34 — 2.38

🔴Vulnerability Details

OSV

binutils vulnerabilities↗2024-01-15

▶

OSV

CVE-2022-47008: An issue was discovered function make_tempdir, and make_tempname in bucomm↗2023-08-22

▶

CVEList

CVE-2022-47008: An issue was discovered function make_tempdir, and make_tempname in bucomm↗2023-08-22

▶

GHSA

GHSA-7fpc-wx39-r8j5: An issue was discovered function make_tempdir, and make_tempname in bucomm↗2023-08-22

▶

📋Vendor Advisories

Ubuntu

GNU binutils vulnerabilities↗2024-01-15

▶

Ubuntu

GNU binutils vulnerabilities↗2023-10-04

▶

Microsoft

function make_tempdir and make_tempname in bucomm.c in Binutils 2.34 thru 2.38 allows attackers to cause a denial of service due to memory leaks.↗2023-08-08

▶

Red Hat

binutils: memory leak in make_tempdir() and make_tempname() in bucomm.c↗2022-06-16

▶

Debian

CVE-2022-47008: binutils - An issue was discovered function make_tempdir, and make_tempname in bucomm.c in ...↗2022

▶