PT-2023-6122 · Gnu+6 · Gnu Binutils+6

·

CVE-2022-48065

·

Published

2023-08-22

·

Updated

2025-01-28

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions GNU Binutils versions prior to 2.40
Description The issue is related to a memory leak in the find abstract instance function in dwarf2.c. This can be exploited by a remote attacker to cause a denial of service.
Recommendations For versions prior to 2.40, update to version 2.40 or later to resolve the issue. As a temporary workaround, consider restricting access to the find abstract instance function in dwarf2.c to minimize the risk of exploitation.

Exploit

Fix

DoS

Memory Leak

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-28587
BDU:2023-06828
BDU:2023-06833
CVE-2022-48065
OPENSUSE-SU-2023_3825-1
OPENSUSE-SU-2024:13411-1
ROSA-SA-2025-2645
SUSE-SU-2023:3695-1
SUSE-SU-2023:3825-1
USN-6655-1

Affected Products

Astra Linux
Debian
Gnu Binutils
Linuxmint
Red Os
Suse
Ubuntu