CVE-2022-4285
Fixed in a distro release EPSS <1%CVSS 5.5
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.
Products: gnu binutils, fedoraproject fedora, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | binutils | 2.30-119.el8_8.2 |
| AlmaLinux 8 | binutils-devel | 2.30-119.el8_8.2 |
| AlmaLinux 8 | gcc-toolset-12-binutils | 2.38-17.el8 |
| AlmaLinux 8 | gcc-toolset-12-binutils-devel | 2.38-17.el8 |
| AlmaLinux 8 | gcc-toolset-12-binutils-gold | 2.38-17.el8 |
| AlmaLinux 9 | binutils | 2.35.2-42.el9 |
| AlmaLinux 9 | binutils-devel | 2.35.2-42.el9 |
| AlmaLinux 9 | binutils-gold | 2.35.2-42.el9 |
| Debian 12 | binutils | 2.39.50.20221208-2 |
| Debian 13 | binutils | 2.39.50.20221208-2 |
| Debian 14 | binutils | 2.39.50.20221208-2 |
| Red Hat Enterprise Linux 8 | binutils | 0:2.30-119.el8_8.2 |
| Red Hat Enterprise Linux 8 | binutils-debuginfo | 0:2.30-119.el8_8.2 |
| Red Hat Enterprise Linux 8 | binutils-debugsource | 0:2.30-119.el8_8.2 |
| Red Hat Enterprise Linux 8 | binutils-devel | 0:2.30-119.el8_8.2 |
| Red Hat Enterprise Linux 8 | gcc-toolset-12-binutils | 0:2.38-17.el8 |
| Red Hat Enterprise Linux 8 | gcc-toolset-12-binutils-debuginfo | 0:2.38-17.el8 |
| Red Hat Enterprise Linux 8 | gcc-toolset-12-binutils-devel | 0:2.38-17.el8 |
| Red Hat Enterprise Linux 8 | gcc-toolset-12-binutils-gold | 0:2.38-17.el8 |
| Red Hat Enterprise Linux 8 | gcc-toolset-12-binutils-gold-debuginfo | 0:2.38-17.el8 |
| Red Hat Enterprise Linux 9 | binutils | 0:2.35.2-42.el9 |
| Red Hat Enterprise Linux 9 | binutils-debuginfo | 0:2.35.2-42.el9 |
| Red Hat Enterprise Linux 9 | binutils-debugsource | 0:2.35.2-42.el9 |
| Red Hat Enterprise Linux 9 | binutils-devel | 0:2.35.2-42.el9 |
| Red Hat Enterprise Linux 9 | binutils-gold | 0:2.35.2-42.el9 |
| Red Hat Enterprise Linux 9 | binutils-gold-debuginfo | 0:2.35.2-42.el9 |
| Red Hat Enterprise Linux 9 | cross-binutils-aarch64-debuginfo | 0:2.35.2-42.el9 |
| Red Hat Enterprise Linux 9 | cross-binutils-ppc64le-debuginfo | 0:2.35.2-42.el9 |
| Red Hat Enterprise Linux 9 | cross-binutils-s390x-debuginfo | 0:2.35.2-42.el9 |
| Red Hat rhel eus 8.6 | binutils | 0:2.30-113.el8_6.2 |
| Red Hat rhel eus 8.6 | binutils-debuginfo | 0:2.30-113.el8_6.2 |
| Red Hat rhel eus 8.6 | binutils-debugsource | 0:2.30-113.el8_6.2 |
| Red Hat rhel eus 8.6 | binutils-devel | 0:2.30-113.el8_6.2 |
| Red Hat rhel software collections 3 | devtoolset-12-binutils | 0:2.36.1-6.el7 |
| Red Hat rhel software collections 3 | devtoolset-12-binutils-debuginfo | 0:2.36.1-6.el7 |
| Red Hat rhel software collections 3 | devtoolset-12-binutils-devel | 0:2.36.1-6.el7 |
| Rocky Linux 8 | binutils | 0:2.30-119.el8_8.2 |
| Rocky Linux 8 | gcc-toolset-12-binutils | 0:2.38-17.el8 |
| SUSE Enterprise Storage 7.1 | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP4 | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP5 | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP4 | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise Server 12 SP5 | binutils | 2.41-9.53.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | binutils | 2.41-9.53.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | binutils | 2.41-150100.7.46.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | binutils | 2.41-9.53.1 |
| SUSE Manager Proxy 4.2 | binutils | 2.41-150100.7.46.1 |
| SUSE Manager Server 4.2 | binutils | 2.41-150100.7.46.1 |
| Ubuntu 16.04 LTS | binutils-avr | no fix |
| Ubuntu 18.04 LTS | binutils-avr | no fix |
| Ubuntu 20.04 LTS | binutils | 2.34-6ubuntu1.7 |
| Ubuntu 20.04 LTS | binutils-avr | no fix |
| Ubuntu 20.04 LTS | gdb | 9.2-0ubuntu1~20.04.2 |
| Ubuntu 22.04 LTS | binutils | 2.38-4ubuntu2.4 |
| Ubuntu 22.04 LTS | binutils-avr | no fix |
| Ubuntu 22.04 LTS | gdb | 12.1-0ubuntu1~22.04.2 |
| Ubuntu 24.04 LTS | binutils-avr | no fix |
| Ubuntu 25.10 | binutils-avr | no fix |
| Ubuntu 26.04 LTS | binutils-avr | no fix |
| Ubuntu 26.10 | binutils-avr | no fix |
| Ubuntu Pro 14.04 LTS | binutils | 2.24-5ubuntu14.2+esm6 |
| Ubuntu Pro 16.04 LTS | gdb | 7.11.1-0ubuntu1~16.5+esm1 |
| Ubuntu Pro 18.04 LTS | gdb | 8.1.1-0ubuntu1+esm1 |
| openSUSE Leap 15.4 | binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-aarch64-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-arm-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-avr-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-epiphany-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-hppa-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-hppa64-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-i386-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-ia64-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-m68k-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-mips-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-ppc-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-ppc64-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-ppc64le-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-riscv64-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-rx-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-s390-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-s390x-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-sparc-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-sparc64-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-spu-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-x86_64-binutils | 2.41-150100.7.46.1 |
| openSUSE Leap 15.5 | cross-xtensa-binutils | 2.41-150100.7.46.1 |
| openSUSE Tumbleweed | binutils | 2.40-1.1 |