UBUNTU-CVE-2022-48063

    Dashboard / Vulnerabilities / UBUNTU-CVE-2022-48063

    UBUNTU-CVE-2022-48063

    Published: 22 Aug 2023Last Modified: 22 Apr 2026
    Upstream:
    CVE-2022-48063

    Summary:

    Details: GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

    References: https://ubuntu.com/security/CVE-2022-48063, https://ubuntu.com/security/notices/USN-6413-1, https://ubuntu.com/security/notices/USN-6655-1, https://www.cve.org/CVERecord?id=CVE-2022-48063

    Affected packages

    Package

    Name: binutils

    Purl: pkg:deb/ubuntu/[email protected]+esm5?arch=source&distro=trusty/esm

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2.24-5ubuntu14.2+esm5

    Affected versions

    2.23.52.20130913-0ubuntu1
    2.23.90.20131017-1ubuntu1
    2.23.90.20131116-1ubuntu1
    2.23.91.20131123-1ubuntu1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2022-48063 | CVE-DB