CVE-2023-2222 - binutils: objdump SEGV in concat_filename() at dwarf2.c:2060

binutils: objdump SEGV in concat_filename() at dwarf2.c:2060

Published Oct 3, 2023

No CVSS score

EPSS 0.04%

Rejected reason: This was deemed not a security vulnerability by upstream.

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	binutils	Out of support scope	n/a
Red Hat Enterprise Linux 7	binutils	Out of support scope	n/a
Red Hat Enterprise Linux 7	gdb	Out of support scope	n/a
Red Hat Enterprise Linux 8	binutils	Affected	n/a
Red Hat Enterprise Linux 8	gcc-toolset-11-binutils	Will not fix	n/a
Red Hat Enterprise Linux 8	gcc-toolset-11-gdb	Not affected	n/a
Red Hat Enterprise Linux 8	gcc-toolset-12-binutils	Affected	n/a
Red Hat Enterprise Linux 8	gcc-toolset-12-gdb	Not affected	n/a
Red Hat Enterprise Linux 8	gcc-toolset-13-binutils	Not affected	n/a
Red Hat Enterprise Linux 8	gdb	Affected	n/a
Red Hat Enterprise Linux 9	binutils	Affected	n/a
Red Hat Enterprise Linux 9	gcc-toolset-12-binutils	Affected	n/a
Red Hat Enterprise Linux 9	gcc-toolset-12-gdb	Not affected	n/a
Red Hat Enterprise Linux 9	gcc-toolset-13-binutils	Not affected	n/a
Red Hat Enterprise Linux 9	gdb	Affected	n/a

Red Hat statement

Red Hat Product Security does not consider this to be a vulnerability and the CVE has been rejected by upsteam.

Weaknesses (1)

CWE-125

Out-of-bounds Read

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2023-2222		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2188562		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-33734		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-2222
https://www.cve.org/CVERecord?id=CVE-2023-2222