vulnerability

Red Hat: CVE-2022-4285: binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (Multiple Advisories)

Severity
5
CVSS
(AV:L/AC:M/Au:N/C:N/I:N/A:C)
Published
Jan 27, 2023
Added
May 17, 2023
Modified
Sep 29, 2025

Description

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.

Solutions

no-fix-redhat-rpm-packageredhat-upgrade-binutilsredhat-upgrade-binutils-debuginforedhat-upgrade-binutils-debugsourceredhat-upgrade-binutils-develredhat-upgrade-binutils-goldredhat-upgrade-binutils-gold-debuginforedhat-upgrade-cross-binutils-aarch64-debuginforedhat-upgrade-cross-binutils-ppc64le-debuginforedhat-upgrade-cross-binutils-s390x-debuginforedhat-upgrade-gcc-toolset-12-binutilsredhat-upgrade-gcc-toolset-12-binutils-debuginforedhat-upgrade-gcc-toolset-12-binutils-develredhat-upgrade-gcc-toolset-12-binutils-goldredhat-upgrade-gcc-toolset-12-binutils-gold-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.