Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2023:2873

Опубликовано: 28 июн. 2026
Источник: rocky
Оценка: Moderate

Описание

Moderate: gcc-toolset-12-binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.

Security Fix(es):

  • binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (CVE-2022-4285)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
gcc-toolset-12-binutilsx86_6417.el8gcc-toolset-12-binutils-2.38-17.el8.x86_64.rpm
gcc-toolset-12-binutils-develi68617.el8gcc-toolset-12-binutils-devel-2.38-17.el8.i686.rpm
gcc-toolset-12-binutils-develx86_6417.el8gcc-toolset-12-binutils-devel-2.38-17.el8.x86_64.rpm
gcc-toolset-12-binutils-goldx86_6417.el8gcc-toolset-12-binutils-gold-2.38-17.el8.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 3 лет назад

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.

CVSS3: 5.5
redhat
почти 4 года назад

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.

CVSS3: 5.5
nvd
больше 3 лет назад

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.

CVSS3: 5.5
msrc
10 месяцев назад

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.

CVSS3: 5.5
debian
больше 3 лет назад

An illegal memory access flaw was found in the binutils package. Parsi ...