CVE-2022-48063

Summary

CVE-2022-48063 is a memory consumption vulnerability affecting GNU Binutils before version 2.40. The issue arises from the function load_separate_debug_files at dwarf2.c, which can be exploited when processing a crafted ELF file. The vulnerability results in excessive memory consumption, potentially leading to denial-of-service attacks, and in specific cases, enabling a DNS attack. It is essential for users to update their Binutils installation to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.