PT-2023-13441
CVE-2022-35206
·
Published
2023-08-22
·
Updated
2024-06-15
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Binutils readelf version 2.38.50
Description
A null pointer dereference issue exists in the readelf component of Binutils, specifically in the function
read and display attr value within the file dwarf.c. This issue can be triggered, potentially leading to a crash or other unintended behavior.Recommendations
For Binutils readelf version 2.38.50, consider applying a patch or update that fixes the null pointer dereference vulnerability in the
read and display attr value function. As a temporary workaround, restrict the use of the read and display attr value function until a patch is available.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾