Every CVE Search/ Get API key

CVE-2022-48064

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability...

5.5 MediumFix available

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.61%Up 0.6 points since Aug 23, 2023
90%50%10%1%

What each source reports

NVD Score used 5.5

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

Record
CVE-2022-48064
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
CVE List No score

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

Record
CVE-2022-48064
Updated
2026-11-02
EUVDEUVD-2022-50778 No score

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

Record
EUVD-2022-50778
Updated
2026-11-03
GitHub AdvisoriesGHSA-p564-948g-fpq9 5.5

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability...

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

Record
GHSA-p564-948g-fpq9
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-770
Updated
2026-11-02
OSVAZL-28589 5.5

CVE-2022-48064 affecting package gdb for versions less than 11.2-6

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

Record
AZL-28589
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2022-48064 5.5
Record
BELL-CVE-2022-48064
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 21 moreShow less
OSVOESA-2023-1592 6.5

binutils security update

The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols. dlltool - Creates files for building and using DLLs. gold - A new, faster, ELF only linker, still in beta test. gprof - Displays profiling information. nlmconv - Converts object code into an NLM. nm - Lists symbols from object files. objcopy - Copies and translates object files. objdump - Displays information from object files. ranlib - Generates an index to the contents of an archive. readelf - Displays information from any ELF format object file. size - Lists the section sizes of an object or archive file. strings - Lists printable strings from files. trip - Discards symbols. windmc - A Windows compatible message compiler. windres - A compiler for Windows resource files.

Security Fix(es):

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.(CVE-2022-4285)

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)

A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.(CVE-2023-1972)

Record
OESA-2023-1592
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1593 6.5

binutils security update

The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols. dlltool - Creates files for building and using DLLs. gold - A new, faster, ELF only linker, still in beta test. gprof - Displays profiling information. nlmconv - Converts object code into an NLM. nm - Lists symbols from object files. objcopy - Copies and translates object files. objdump - Displays information from object files. ranlib - Generates an index to the contents of an archive. readelf - Displays information from any ELF format object file. size - Lists the section sizes of an object or archive file. strings - Lists printable strings from files. trip - Discards symbols. windmc - A Windows compatible message compiler. windres - A compiler for Windows resource files.

Security Fix(es):

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.(CVE-2022-4285)

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)

A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.(CVE-2023-1972)

Record
OESA-2023-1593
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1594 6.5

binutils security update

The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols. dlltool - Creates files for building and using DLLs. gold - A new, faster, ELF only linker, still in beta test. gprof - Displays profiling information. nlmconv - Converts object code into an NLM. nm - Lists symbols from object files. objcopy - Copies and translates object files. objdump - Displays information from object files. ranlib - Generates an index to the contents of an archive. readelf - Displays information from any ELF format object file. size - Lists the section sizes of an object or archive file. strings - Lists printable strings from files. trip - Discards symbols. windmc - A Windows compatible message compiler. windres - A compiler for Windows resource files.

Security Fix(es):

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.(CVE-2022-4285)

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)

A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.(CVE-2023-1972)

Record
OESA-2023-1594
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1595 5.5

binutils security update

The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols. dlltool - Creates files for building and using DLLs. gold - A new, faster, ELF only linker, still in beta test. gprof - Displays profiling information. nlmconv - Converts object code into an NLM. nm - Lists symbols from object files. objcopy - Copies and translates object files. objdump - Displays information from object files. ranlib - Generates an index to the contents of an archive. readelf - Displays information from any ELF format object file. size - Lists the section sizes of an object or archive file. strings - Lists printable strings from files. trip - Discards symbols. windmc - A Windows compatible message compiler. windres - A compiler for Windows resource files.

Security Fix(es):

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)

Record
OESA-2023-1595
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1596 5.5

binutils security update

The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols. dlltool - Creates files for building and using DLLs. gold - A new, faster, ELF only linker, still in beta test. gprof - Displays profiling information. nlmconv - Converts object code into an NLM. nm - Lists symbols from object files. objcopy - Copies and translates object files. objdump - Displays information from object files. ranlib - Generates an index to the contents of an archive. readelf - Displays information from any ELF format object file. size - Lists the section sizes of an object or archive file. strings - Lists printable strings from files. trip - Discards symbols. windmc - A Windows compatible message compiler. windres - A compiler for Windows resource files.

Security Fix(es):

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)

Record
OESA-2023-1596
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1852 5.5

gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)

Record
OESA-2025-1852
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1853 5.5

gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)

Record
OESA-2025-1853
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1854 5.5

gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)

Record
OESA-2025-1854
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-48064 5.5

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

Record
UBUNTU-CVE-2022-48064
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1776963378 No score

binutils: Fix of 8 CVEs

  • CVE-2022-47007: fix memory leak in stab_demangle_v3_arg
  • CVE-2022-47008: fix memory leak in make_tempdir and make_tempname
  • CVE-2022-47011: fix memory leak in parse_stab_struct_fields
  • CVE-2022-47010: fix memory leak in pr_function_type
  • CVE-2022-48063: fix excessive memory allocation in load_specific_debug_section for corrupt ELF
  • CVE-2022-48064: fix SHT_NOBITS section size sanity check in find_debug_info
  • CVE-2022-48065: fix memory leak in find_abstract_instance on duplicate DW_AT_decl_file
  • CVE-2022-38533: fix rewrite_elf_program_header looping on crafted file (strip/objcopy)
Record
CLSA-2026-1776963378
Updated
2026-11-02
OSVCLSA-2026-1779093100 No score

binutils: Fix of 6 CVEs

  • CVE-2022-38533: fix heap buffer overflow in bfd_getl32 from strip_main with crafted COFF file
  • CVE-2022-47007: fix memory leak in stab_demangle_v3_arg in stabs.c
  • CVE-2022-47008: fix memory leak in make_tempdir and make_tempname in bucomm.c
  • CVE-2022-47010: fix memory leak in pr_function_type in prdbg.c
  • CVE-2022-48064: fix excessive memory consumption in bfd_dwarf2_find_nearest_line_with_alt
  • CVE-2023-1972: fix heap buffer overflow in _bfd_elf_slurp_version_tables
Record
CLSA-2026-1779093100
Updated
2026-11-02
OSV No score

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

Record
CVE-2022-48064
Updated
2026-11-02
OSVDEBIAN-CVE-2022-48064 No score

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

Record
DEBIAN-CVE-2022-48064
Updated
2026-11-03
OSVopenSUSE-SU-2024:13411-1 No score

binutils-2.41-1.2 on GA media

These are all security issues fixed in the binutils-2.41-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13411-1
Updated
2026-11-02
OSVSUSE-SU-2023:3695-1 No score

Security update for binutils

This update for binutils fixes the following issues:

Update to version 2.41 [jsc#PED-5778]:

  • The MIPS port now supports the Sony Interactive Entertainment Allegrex processor, used with the PlayStation Portable, which implements the MIPS II ISA along with a single-precision FPU and a few implementation-specific integer instructions.

  • Objdump's --private option can now be used on PE format files to display the fields in the file header and section headers.

  • New versioned release of libsframe: libsframe.so.1. This release introduces versioned symbols with version node name LIBSFRAME_1.0. This release also updates the ABI in an incompatible way: this includes removal of sframe_get_funcdesc_with_addr API, change in the behavior of sframe_fre_get_ra_offset and sframe_fre_get_fp_offset APIs.

  • SFrame Version 2 is now the default (and only) format version supported by gas, ld, readelf and objdump.

  • Add command-line option, --strip-section-headers, to objcopy and strip to remove ELF section header from ELF file.

  • The RISC-V port now supports the following new standard extensions:

    • Zicond (conditional zero instructions)
    • Zfa (additional floating-point instructions)
    • Zvbb, Zvbc, Zvkg, Zvkned, Zvknh[ab], Zvksed, Zvksh, Zvkn, Zvknc, Zvkng, Zvks, Zvksc, Zvkg, Zvkt (vector crypto instructions)
  • The RISC-V port now supports the following vendor-defined extensions:

    • XVentanaCondOps
  • Add support for Intel FRED, LKGS and AMX-COMPLEX instructions.

  • A new .insn directive is recognized by x86 gas.

  • Add SME2 support to the AArch64 port.

  • The linker now accepts a command line option of --remap-inputs <PATTERN>=<FILE> to relace any input file that matches <PATTERN> with <FILE>. In addition the option --remap-inputs-file=<FILE> can be used to specify a file containing any number of these remapping directives.

  • The linker command line option --print-map-locals can be used to include local symbols in a linker map. (ELF targets only).

  • For most ELF based targets, if the --enable-linker-version option is used then the version of the linker will be inserted as a string into the .comment section.

  • The linker script syntax has a new command for output sections: ASCIZ 'string' This will insert a zero-terminated string at the current location.

  • Add command-line option, -z nosectionheader, to omit ELF section header.

  • Contains fixes for these non-CVEs (not security bugs per upstreams SECURITY.md):

    • bsc#1209642 aka CVE-2023-1579 aka PR29988
    • bsc#1210297 aka CVE-2023-1972 aka PR30285
    • bsc#1210733 aka CVE-2023-2222 aka PR29936
    • bsc#1213458 aka CVE-2021-32256 aka PR105039 (gcc)
    • bsc#1214565 aka CVE-2020-19726 aka PR26240
    • bsc#1214567 aka CVE-2022-35206 aka PR29290
    • bsc#1214579 aka CVE-2022-35205 aka PR29289
    • bsc#1214580 aka CVE-2022-44840 aka PR29732
    • bsc#1214604 aka CVE-2022-45703 aka PR29799
    • bsc#1214611 aka CVE-2022-48065 aka PR29925
    • bsc#1214619 aka CVE-2022-48064 aka PR29922
    • bsc#1214620 aka CVE-2022-48063 aka PR29924
    • bsc#1214623 aka CVE-2022-47696 aka PR29677
    • bsc#1214624 aka CVE-2022-47695 aka PR29846
    • bsc#1214625 aka CVE-2022-47673 aka PR29876
  • Fixed a compatibility problem caused by binutils-revert-rela.diff in SLE codestreams. Needed for update of glibc as that would otherwise pick up the broken relative relocs support. [bsc#1213282, jsc#PED-1435]

  • Document fixed CVEs:

    • bsc#1208037 aka CVE-2023-25588 aka PR29677
    • bsc#1208038 aka CVE-2023-25587 aka PR29846
    • bsc#1208040 aka CVE-2023-25585 aka PR29892
    • bsc#1208409 aka CVE-2023-0687 aka PR29444
  • Enable bpf-none cross target and add bpf-none to the multitarget set of supported targets.

  • Disable packed-relative-relocs for old codestreams. They generate buggy relocations when binutils-revert-rela.diff is active. [bsc#1206556]

  • Disable ZSTD debug section compress by default.

  • Enable zstd compression algorithm (instead of zlib) for debug info sections by…

Record
SUSE-SU-2023:3695-1
Updated
2026-11-02
OSVSUSE-SU-2023:3825-1 No score

Security update for binutils

This update for binutils fixes the following issues:

Update to version 2.41 [jsc#PED-5778]:

  • The MIPS port now supports the Sony Interactive Entertainment Allegrex processor, used with the PlayStation Portable, which implements the MIPS II ISA along with a single-precision FPU and a few implementation-specific integer instructions.

  • Objdump's --private option can now be used on PE format files to display the fields in the file header and section headers.

  • New versioned release of libsframe: libsframe.so.1. This release introduces versioned symbols with version node name LIBSFRAME_1.0. This release also updates the ABI in an incompatible way: this includes removal of sframe_get_funcdesc_with_addr API, change in the behavior of sframe_fre_get_ra_offset and sframe_fre_get_fp_offset APIs.

  • SFrame Version 2 is now the default (and only) format version supported by gas, ld, readelf and objdump.

  • Add command-line option, --strip-section-headers, to objcopy and strip to remove ELF section header from ELF file.

  • The RISC-V port now supports the following new standard extensions:

    • Zicond (conditional zero instructions)
    • Zfa (additional floating-point instructions)
    • Zvbb, Zvbc, Zvkg, Zvkned, Zvknh[ab], Zvksed, Zvksh, Zvkn, Zvknc, Zvkng, Zvks, Zvksc, Zvkg, Zvkt (vector crypto instructions)
  • The RISC-V port now supports the following vendor-defined extensions:

    • XVentanaCondOps
  • Add support for Intel FRED, LKGS and AMX-COMPLEX instructions.

  • A new .insn directive is recognized by x86 gas.

  • Add SME2 support to the AArch64 port.

  • The linker now accepts a command line option of --remap-inputs <PATTERN>=<FILE> to relace any input file that matches <PATTERN> with <FILE>. In addition the option --remap-inputs-file=<FILE> can be used to specify a file containing any number of these remapping directives.

  • The linker command line option --print-map-locals can be used to include local symbols in a linker map. (ELF targets only).

  • For most ELF based targets, if the --enable-linker-version option is used then the version of the linker will be inserted as a string into the .comment section.

  • The linker script syntax has a new command for output sections: ASCIZ 'string' This will insert a zero-terminated string at the current location.

  • Add command-line option, -z nosectionheader, to omit ELF section header.

  • Contains fixes for these non-CVEs (not security bugs per upstreams SECURITY.md):

    • bsc#1209642 aka CVE-2023-1579 aka PR29988
    • bsc#1210297 aka CVE-2023-1972 aka PR30285
    • bsc#1210733 aka CVE-2023-2222 aka PR29936
    • bsc#1213458 aka CVE-2021-32256 aka PR105039 (gcc)
    • bsc#1214565 aka CVE-2020-19726 aka PR26240
    • bsc#1214567 aka CVE-2022-35206 aka PR29290
    • bsc#1214579 aka CVE-2022-35205 aka PR29289
    • bsc#1214580 aka CVE-2022-44840 aka PR29732
    • bsc#1214604 aka CVE-2022-45703 aka PR29799
    • bsc#1214611 aka CVE-2022-48065 aka PR29925
    • bsc#1214619 aka CVE-2022-48064 aka PR29922
    • bsc#1214620 aka CVE-2022-48063 aka PR29924
    • bsc#1214623 aka CVE-2022-47696 aka PR29677
    • bsc#1214624 aka CVE-2022-47695 aka PR29846
    • bsc#1214625 aka CVE-2022-47673 aka PR29876
  • This only existed only for a very short while in SLE-15, as the main variant in devel:gcc subsumed this in binutils-revert-rela.diff. Hence:

  • Document fixed CVEs:

    • bsc#1208037 aka CVE-2023-25588 aka PR29677
    • bsc#1208038 aka CVE-2023-25587 aka PR29846
    • bsc#1208040 aka CVE-2023-25585 aka PR29892
    • bsc#1208409 aka CVE-2023-0687 aka PR29444
  • Enable bpf-none cross target and add bpf-none to the multitarget set of supported targets.

  • Disable packed-relative-relocs for old codestreams. They generate buggy relocations when binutils-revert-rela.diff is active. [bsc#1206556]

  • Disable ZSTD debug section compress by default.

  • Enable zstd compression algorithm (instead of zlib) for debug info sections by default.

  • Pack libgprofng only for supported platforms.

  • Move…

Record
SUSE-SU-2023:3825-1
Updated
2026-11-02
OSVSUSE-SU-2024:0319-1 No score

Security update for gdb

This update for gdb fixes the following issues:

  • Drop libdebuginfod1 BuildRequires/Recommends. The former isn't needed because there's a build requirement on libdebuginfod-devel already, which will pull the shared library. And the latter, because it's bogus since RPM auto generated dependency will take care of that requirement.

gdb was released in 13.2:

  • This version of GDB includes the following changes and enhancements:

    • Support for the following new targets has been added in both GDB and GDBserver:

      * GNU/Linux/LoongArch (gdbserver) loongarch*-*-linux*
      * GNU/Linux/CSKY (gdbserver) csky*-*linux* 
      
    • The Windows native target now supports target async.

    • Floating-point support has now been added on LoongArch GNU/Linux.

    • New commands:

      * set print nibbles [on|off]
      * show print nibbles
      
      * This controls whether the 'print/t' command will display binary values in groups of four bits, known as 'nibbles'. The default is 'off'.
        Various styling-related commands. See the gdb/NEWS file for more details.
        Various maintenance commands. These are normally aimed at GDB experts or developers. See the gdb/NEWS file for more details. 
      
    • Python API improvements:

        * New Python API for instruction disassembly.
      
        * The new attribute 'locations' of gdb.Breakpoint returns a list of gdb.BreakpointLocation objects specifying the locations where the breakpoint is inserted into the debuggee.
        * New Python type gdb.BreakpointLocation.
        * New function gdb.format_address(ADDRESS, PROGSPACE, ARCHITECTURE) that formats ADDRESS as 'address '
        * New function gdb.current_language that returns the name of the current language. Unlike gdb.parameter('language'), this will never return 'auto'.
        * New function gdb.print_options that returns a dictionary of the prevailing print options, in the form accepted by gdb.Value.format_string.
        * New method gdb.Frame.language that returns the name of the frame's language.
        * gdb.Value.format_string now uses the format provided by 'print', if it is called during a 'print' or other similar operation.
        * gdb.Value.format_string now accepts the 'summary' keyword. This can be used to request a shorter representation of a value, the way that 'set print frame-arguments scalars' does.
        * The gdb.register_window_type method now restricts the set of acceptable window names. The first character of a window's name must start with a character in the set [a-zA-Z], every subsequent character of a window's name must be in the set [-_.a-zA-Z0-9]. 
      
    • GDB/MI changes:

       * MI version 1 is deprecated, and will be removed in GDB 14.
       * The async record stating the stopped reason 'breakpoint-hit' now contains an optional field locno. 
      
    • Miscellaneous improvements:

       * gdb now supports zstd compressed debug sections (ELFCOMPRESS_ZSTD) for ELF.
       * New convenience variable $_inferior_thread_count contains the number of live threads in the current inferior.
       * New convenience variables $_hit_bpnum and $_hit_locno, set to the breakpoint number and the breakpoint location number of the breakpoint last hit.
       * The 'info breakpoints' now displays enabled breakpoint locations of disabled breakpoints as in the 'y-' state.
       * The format of 'disassemble /r' and 'record instruction-history /r' has changed to match the layout of GNU objdump when disassembling.
      
       * A new format '/b' has been introduce to provide the old behavior of '/r'.
       * The TUI no longer styles the source and assembly code highlighted by the current position indicator by default. You can however re-enable styling using the new 'set style tui-current-position' command.
       * It is now possible to use the 'document' command to document user-defined commands.
       * Support for memory tag data for AArch64 MTE. 
      

    *…

Record
SUSE-SU-2024:0319-1
Updated
2026-11-02
OSVSUSE-SU-2024:0898-1 No score

Security update for gdb

This update for gdb fixes the following issues:

  • Drop libdebuginfod1 BuildRequires/Recommends. The former isn't needed because there's a build requirement on libdebuginfod-devel already, which will pull the shared library. And the latter, because it's bogus since RPM auto generated dependency will take care of that requirement.

gdb was released in 13.2:

  • This version of GDB includes the following changes and enhancements:

    • Support for the following new targets has been added in both GDB and GDBserver:

      * GNU/Linux/LoongArch (gdbserver) loongarch*-*-linux*
      * GNU/Linux/CSKY (gdbserver) csky*-*linux* 
      
    • The Windows native target now supports target async.

    • Floating-point support has now been added on LoongArch GNU/Linux.

    • New commands:

      * set print nibbles [on|off]
      * show print nibbles
      
      * This controls whether the 'print/t' command will display binary values in groups of four bits, known as 'nibbles'. The default is 'off'.
        Various styling-related commands. See the gdb/NEWS file for more details.
        Various maintenance commands. These are normally aimed at GDB experts or developers. See the gdb/NEWS file for more details. 
      
    • Python API improvements:

        * New Python API for instruction disassembly.
      
        * The new attribute 'locations' of gdb.Breakpoint returns a list of gdb.BreakpointLocation objects specifying the locations where the breakpoint is inserted into the debuggee.
        * New Python type gdb.BreakpointLocation.
        * New function gdb.format_address(ADDRESS, PROGSPACE, ARCHITECTURE) that formats ADDRESS as 'address '
        * New function gdb.current_language that returns the name of the current language. Unlike gdb.parameter('language'), this will never return 'auto'.
        * New function gdb.print_options that returns a dictionary of the prevailing print options, in the form accepted by gdb.Value.format_string.
        * New method gdb.Frame.language that returns the name of the frame's language.
        * gdb.Value.format_string now uses the format provided by 'print', if it is called during a 'print' or other similar operation.
        * gdb.Value.format_string now accepts the 'summary' keyword. This can be used to request a shorter representation of a value, the way that 'set print frame-arguments scalars' does.
        * The gdb.register_window_type method now restricts the set of acceptable window names. The first character of a window's name must start with a character in the set [a-zA-Z], every subsequent character of a window's name must be in the set [-_.a-zA-Z0-9]. 
      
    • GDB/MI changes:

       * MI version 1 is deprecated, and will be removed in GDB 14.
       * The async record stating the stopped reason 'breakpoint-hit' now contains an optional field locno. 
      
    • Miscellaneous improvements:

       * gdb now supports zstd compressed debug sections (ELFCOMPRESS_ZSTD) for ELF.
       * New convenience variable $_inferior_thread_count contains the number of live threads in the current inferior.
       * New convenience variables $_hit_bpnum and $_hit_locno, set to the breakpoint number and the breakpoint location number of the breakpoint last hit.
       * The 'info breakpoints' now displays enabled breakpoint locations of disabled breakpoints as in the 'y-' state.
       * The format of 'disassemble /r' and 'record instruction-history /r' has changed to match the layout of GNU objdump when disassembling.
      
       * A new format '/b' has been introduce to provide the old behavior of '/r'.
       * The TUI no longer styles the source and assembly code highlighted by the current position indicator by default. You can however re-enable styling using the new 'set style tui-current-position' command.
       * It is now possible to use the 'document' command to document user-defined commands.
       * Support for memory tag data for AArch64 MTE. 
      

    *…

Record
SUSE-SU-2024:0898-1
Updated
2026-11-02
OSVSUSE-SU-2024:0899-1 No score

Security update for gdb

This update for gdb fixes the following issues:

  • Drop libdebuginfod1 BuildRequires/Recommends. The former isn't needed because there's a build requirement on libdebuginfod-devel already, which will pull the shared library. And the latter, because it's bogus since RPM auto generated dependency will take care of that requirement.

gdb was released in 13.2:

  • This version of GDB includes the following changes and enhancements:

    • Support for the following new targets has been added in both GDB and GDBserver:

      * GNU/Linux/LoongArch (gdbserver) loongarch*-*-linux*
      * GNU/Linux/CSKY (gdbserver) csky*-*linux* 
      
    • The Windows native target now supports target async.

    • Floating-point support has now been added on LoongArch GNU/Linux.

    • New commands:

      * set print nibbles [on|off]
      * show print nibbles
      
      * This controls whether the 'print/t' command will display binary values in groups of four bits, known as 'nibbles'. The default is 'off'.
        Various styling-related commands. See the gdb/NEWS file for more details.
        Various maintenance commands. These are normally aimed at GDB experts or developers. See the gdb/NEWS file for more details. 
      
    • Python API improvements:

        * New Python API for instruction disassembly.
      
        * The new attribute 'locations' of gdb.Breakpoint returns a list of gdb.BreakpointLocation objects specifying the locations where the breakpoint is inserted into the debuggee.
        * New Python type gdb.BreakpointLocation.
        * New function gdb.format_address(ADDRESS, PROGSPACE, ARCHITECTURE) that formats ADDRESS as 'address '
        * New function gdb.current_language that returns the name of the current language. Unlike gdb.parameter('language'), this will never return 'auto'.
        * New function gdb.print_options that returns a dictionary of the prevailing print options, in the form accepted by gdb.Value.format_string.
        * New method gdb.Frame.language that returns the name of the frame's language.
        * gdb.Value.format_string now uses the format provided by 'print', if it is called during a 'print' or other similar operation.
        * gdb.Value.format_string now accepts the 'summary' keyword. This can be used to request a shorter representation of a value, the way that 'set print frame-arguments scalars' does.
        * The gdb.register_window_type method now restricts the set of acceptable window names. The first character of a window's name must start with a character in the set [a-zA-Z], every subsequent character of a window's name must be in the set [-_.a-zA-Z0-9]. 
      
    • GDB/MI changes:

       * MI version 1 is deprecated, and will be removed in GDB 14.
       * The async record stating the stopped reason 'breakpoint-hit' now contains an optional field locno. 
      
    • Miscellaneous improvements:

       * gdb now supports zstd compressed debug sections (ELFCOMPRESS_ZSTD) for ELF.
       * New convenience variable $_inferior_thread_count contains the number of live threads in the current inferior.
       * New convenience variables $_hit_bpnum and $_hit_locno, set to the breakpoint number and the breakpoint location number of the breakpoint last hit.
       * The 'info breakpoints' now displays enabled breakpoint locations of disabled breakpoints as in the 'y-' state.
       * The format of 'disassemble /r' and 'record instruction-history /r' has changed to match the layout of GNU objdump when disassembling.
      
       * A new format '/b' has been introduce to provide the old behavior of '/r'.
       * The TUI no longer styles the source and assembly code highlighted by the current position indicator by default. You can however re-enable styling using the new 'set style tui-current-position' command.
       * It is now possible to use the 'document' command to document user-defined commands.
       * Support for memory tag data for AArch64 MTE. 
      

    *…

Record
SUSE-SU-2024:0899-1
Updated
2026-11-02
OSVSUSE-SU-2024:4413-1 No score

Security update for gdb

This update for gdb fixes the following issues:

Mention changes in GDB 14:

  • GDB now supports the AArch64 Scalable Matrix Extension 2 (SME2), which includes a new 512 bit lookup table register named ZT0.
  • GDB now supports the AArch64 Scalable Matrix Extension (SME), which includes a new matrix register named ZA, a new thread register TPIDR2 and a new vector length register SVG (streaming vector granule). GDB also supports tracking ZA state across signal frames. Some features are still under development or are dependent on ABI specs that are still in alpha stage. For example, manual function calls with ZA state don't have any special handling, and tracking of SVG changes based on DWARF information is still not implemented, but there are plans to do so in the future.
  • GDB now recognizes the NO_COLOR environment variable and disables styling according to the spec. See https://no-color.org/. Styling can be re-enabled with 'set style enabled on'.
  • The AArch64 'org.gnu.gdb.aarch64.pauth' Pointer Authentication feature string has been deprecated in favor of the 'org.gnu.gdb.aarch64.pauth_v2' feature string.
  • GDB now has some support for integer types larger than 64 bits.
  • Multi-target feature configuration. GDB now supports the individual configuration of remote targets' feature sets. Based on the current selection of a target, the commands 'set remote <name>-packet (on|off|auto)' and 'show remote <name>-packet' can be used to configure a target's feature packet and to display its configuration, respectively.
  • GDB has initial built-in support for the Debugger Adapter Protocol.
  • For the break command, multiple uses of the 'thread' or 'task' keywords will now give an error instead of just using the thread or task id from the last instance of the keyword. E.g.: break foo thread 1 thread 2 will now give an error rather than using 'thread 2'.
  • For the watch command, multiple uses of the 'task' keyword will now give an error instead of just using the task id from the last instance of the keyword. E.g.: watch my_var task 1 task 2 will now give an error rather than using 'task 2'. The 'thread' keyword already gave an error when used multiple times with the watch command, this remains unchanged.
  • The 'set print elements' setting now helps when printing large arrays. If an array would otherwise exceed max-value-size, but 'print elements' is set such that the size of elements to print is less than or equal to 'max-value-size', GDB will now still print the array, however only 'max-value-size' worth of data will be added into the value history.
  • For both the break and watch commands, it is now invalid to use both the 'thread' and 'task' keywords within the same command. For example the following commnds will now give an error: break foo thread 1 task 1 watch var thread 2 task 3
  • The printf command now accepts a '%V' output format which will format an expression just as the 'print' command would. Print options can be placed withing '[...]' after the '%V' to modify how the value is printed. E.g: printf '%V', some_array printf '%V[-array-indexes on]', some_array will print the array without, or with array indexes included, just as the array would be printed by the 'print' command. This functionality is also available for dprintf when dprintf-style is 'gdb'.
  • When the printf command requires a string to be fetched from the inferior, GDB now uses the existing 'max-value-size' setting to the limit the memory allocated within GDB. The default 'max-value-size' is 64k. To print longer strings you should increase 'max-value-size'.
  • The Ada 2022 Enum_Rep and Enum_Val attributes are now supported.
  • The Ada 2022 target name symbol ('@') is now supported by the Ada expression parser.
  • The 'list' command now accepts '.' as an argument, which tells GDB to print the location around the point of execution…
Record
SUSE-SU-2024:4413-1
Updated
2026-11-02
OSVSUSE-SU-2024:4414-1 No score

Security update for gdb

This update for gdb fixes the following issues:

Mention changes in GDB 14:

  • GDB now supports the AArch64 Scalable Matrix Extension 2 (SME2), which includes a new 512 bit lookup table register named ZT0.
  • GDB now supports the AArch64 Scalable Matrix Extension (SME), which includes a new matrix register named ZA, a new thread register TPIDR2 and a new vector length register SVG (streaming vector granule). GDB also supports tracking ZA state across signal frames. Some features are still under development or are dependent on ABI specs that are still in alpha stage. For example, manual function calls with ZA state don't have any special handling, and tracking of SVG changes based on DWARF information is still not implemented, but there are plans to do so in the future.
  • GDB now recognizes the NO_COLOR environment variable and disables styling according to the spec. See https://no-color.org/. Styling can be re-enabled with 'set style enabled on'.
  • The AArch64 'org.gnu.gdb.aarch64.pauth' Pointer Authentication feature string has been deprecated in favor of the 'org.gnu.gdb.aarch64.pauth_v2' feature string.
  • GDB now has some support for integer types larger than 64 bits.
  • Multi-target feature configuration. GDB now supports the individual configuration of remote targets' feature sets. Based on the current selection of a target, the commands 'set remote <name>-packet (on|off|auto)' and 'show remote <name>-packet' can be used to configure a target's feature packet and to display its configuration, respectively.
  • GDB has initial built-in support for the Debugger Adapter Protocol.
  • For the break command, multiple uses of the 'thread' or 'task' keywords will now give an error instead of just using the thread or task id from the last instance of the keyword. E.g.: break foo thread 1 thread 2 will now give an error rather than using 'thread 2'.
  • For the watch command, multiple uses of the 'task' keyword will now give an error instead of just using the task id from the last instance of the keyword. E.g.: watch my_var task 1 task 2 will now give an error rather than using 'task 2'. The 'thread' keyword already gave an error when used multiple times with the watch command, this remains unchanged.
  • The 'set print elements' setting now helps when printing large arrays. If an array would otherwise exceed max-value-size, but 'print elements' is set such that the size of elements to print is less than or equal to 'max-value-size', GDB will now still print the array, however only 'max-value-size' worth of data will be added into the value history.
  • For both the break and watch commands, it is now invalid to use both the 'thread' and 'task' keywords within the same command. For example the following commnds will now give an error: break foo thread 1 task 1 watch var thread 2 task 3
  • The printf command now accepts a '%V' output format which will format an expression just as the 'print' command would. Print options can be placed withing '[...]' after the '%V' to modify how the value is printed. E.g: printf '%V', some_array printf '%V[-array-indexes on]', some_array will print the array without, or with array indexes included, just as the array would be printed by the 'print' command. This functionality is also available for dprintf when dprintf-style is 'gdb'.
  • When the printf command requires a string to be fetched from the inferior, GDB now uses the existing 'max-value-size' setting to the limit the memory allocated within GDB. The default 'max-value-size' is 64k. To print longer strings you should increase 'max-value-size'.
  • The Ada 2022 Enum_Rep and Enum_Val attributes are now supported.
  • The Ada 2022 target name symbol ('@') is now supported by the Ada expression parser.
  • The 'list' command now accepts '.' as an argument, which tells GDB to print the location around the point of execution…
Record
SUSE-SU-2024:4414-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gdb
Azure Linux:2
before 11.2-6
11.2-6
binutils
Alpaquita:23
2.39-r2 up to 2.40-r2
2.40-r2
binutils
BellSoft Hardened Containers:23
2.39-r2 up to 2.40-r2
2.40-r2
binutils
TuxCare:AlmaLinux:9.6
before 2.35.2-63.el9.tuxcare.els9
2.35.2-63.el9.tuxcare.els9
binutils-devel
TuxCare:AlmaLinux:9.6
before 2.35.2-63.el9.tuxcare.els9
2.35.2-63.el9.tuxcare.els9
binutils-gold
TuxCare:AlmaLinux:9.6
before 2.35.2-63.el9.tuxcare.els9
2.35.2-63.el9.tuxcare.els9
cross-binutils-aarch64
TuxCare:AlmaLinux:9.6
before 2.35.2-63.el9.tuxcare.els9
2.35.2-63.el9.tuxcare.els9
cross-binutils-ppc64le
TuxCare:AlmaLinux:9.6
before 2.35.2-63.el9.tuxcare.els9
2.35.2-63.el9.tuxcare.els9
cross-binutils-s390x
TuxCare:AlmaLinux:9.6
before 2.35.2-63.el9.tuxcare.els9
2.35.2-63.el9.tuxcare.els9
binutils
TuxCare:AlmaLinux:9.2
before 2.35.2-37.el9.tuxcare.els11
2.35.2-37.el9.tuxcare.els11
Show 102 moreShow less
Affected packages
PackageAffectedFixed
binutils-devel
TuxCare:AlmaLinux:9.2
before 2.35.2-37.el9.tuxcare.els11
2.35.2-37.el9.tuxcare.els11
binutils-gold
TuxCare:AlmaLinux:9.2
before 2.35.2-37.el9.tuxcare.els11
2.35.2-37.el9.tuxcare.els11
cross-binutils-aarch64
TuxCare:AlmaLinux:9.2
before 2.35.2-37.el9.tuxcare.els11
2.35.2-37.el9.tuxcare.els11
cross-binutils-ppc64le
TuxCare:AlmaLinux:9.2
before 2.35.2-37.el9.tuxcare.els11
2.35.2-37.el9.tuxcare.els11
cross-binutils-s390x
TuxCare:AlmaLinux:9.2
before 2.35.2-37.el9.tuxcare.els11
2.35.2-37.el9.tuxcare.els11
binutils
Debian:12
before 2.40-2
2.40-2
binutils
Debian:13
before 2.40-2
2.40-2
binutils
Debian:14
before 2.40-2
2.40-2
binutils
openEuler:22.03-LTS
before 2.37-25.oe2203
2.37-25.oe2203
binutils
openEuler:22.03-LTS-SP1
before 2.37-23.oe2203sp1
2.37-23.oe2203sp1
binutils
openEuler:22.03-LTS-SP2
before 2.37-23.oe2203sp2
2.37-23.oe2203sp2
binutils
openEuler:20.03-LTS-SP1
before 2.34-28.oe1
2.34-28.oe1
binutils
openEuler:20.03-LTS-SP3
before 2.34-28.oe1
2.34-28.oe1
gdb
openEuler:22.03-LTS-SP4
before 11.1-10.oe2203sp4
11.1-10.oe2203sp4
gdb
openEuler:20.03-LTS-SP4
before 9.2-10.oe2003sp4
9.2-10.oe2003sp4
gdb
openEuler:22.03-LTS-SP3
before 11.1-10.oe2203sp3
11.1-10.oe2203sp3
binutils
SUSE:Linux Enterprise Software Development Kit 12 SP5
before 2.41-9.53.1
2.41-9.53.1
binutils
SUSE:Linux Enterprise Server 12 SP5
before 2.41-9.53.1
2.41-9.53.1
binutils
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
before 2.41-9.53.1
2.41-9.53.1
binutils
SUSE:Linux Enterprise Module for Basesystem 15 SP4
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise Module for Basesystem 15 SP5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise Module for Development Tools 15 SP4
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise Module for Development Tools 15 SP5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise Module for Package Hub 15 SP4
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise Module for Package Hub 15 SP5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise Server 15 SP1-LTSS
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise Server 15 SP2-LTSS
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise Server 15 SP3-LTSS
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Manager Proxy 4.2
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Manager Server 4.2
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
SUSE:Enterprise Storage 7.1
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
openSUSE:Leap 15.4
before 2.41-150100.7.46.1
2.41-150100.7.46.1
binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-aarch64-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-arm-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-avr-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-epiphany-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-hppa-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-hppa64-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-i386-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-ia64-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-m68k-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-mips-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-ppc-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-ppc64-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-ppc64le-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-riscv64-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-rx-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-s390-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-s390x-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-sparc-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-sparc64-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-spu-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-x86_64-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
cross-xtensa-binutils
openSUSE:Leap 15.5
before 2.41-150100.7.46.1
2.41-150100.7.46.1
gdb
SUSE:Linux Enterprise Software Development Kit 12 SP5
before 13.2-2.23.1
13.2-2.23.1
gdb
SUSE:Linux Enterprise Server 12 SP5
before 13.2-2.23.1
13.2-2.23.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
before 13.2-2.23.1
13.2-2.23.1
gdb
SUSE:Linux Enterprise Module for Development Tools 15 SP5
before 13.2-150400.15.14.1
13.2-150400.15.14.1
gdb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
before 13.2-150400.15.14.1
13.2-150400.15.14.1
gdb
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
before 13.2-150400.15.14.1
13.2-150400.15.14.1
gdb
SUSE:Linux Enterprise Server 15 SP4-LTSS
before 13.2-150400.15.14.1
13.2-150400.15.14.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
before 13.2-150400.15.14.1
13.2-150400.15.14.1
gdb
openSUSE:Leap 15.5
before 13.2-150400.15.14.1
13.2-150400.15.14.1
gdb-testresults
openSUSE:Leap 15.5
before 13.2-150400.15.14.4
13.2-150400.15.14.4
gdb
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
before 13.2-150100.8.39.1
13.2-150100.8.39.1
gdb
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
before 13.2-150100.8.39.1
13.2-150100.8.39.1
gdb
SUSE:Linux Enterprise Server 15 SP2-LTSS
before 13.2-150100.8.39.1
13.2-150100.8.39.1
gdb
SUSE:Linux Enterprise Server 15 SP3-LTSS
before 13.2-150100.8.39.1
13.2-150100.8.39.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
before 13.2-150100.8.39.1
13.2-150100.8.39.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
before 13.2-150100.8.39.1
13.2-150100.8.39.1
gdb
SUSE:Enterprise Storage 7.1
before 13.2-150100.8.39.1
13.2-150100.8.39.1
gdb
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
before 14.2-150100.8.45.1
14.2-150100.8.45.1
gdb
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
before 14.2-150100.8.45.1
14.2-150100.8.45.1
gdb
SUSE:Linux Enterprise Server 15 SP2-LTSS
before 14.2-150100.8.45.1
14.2-150100.8.45.1
gdb
SUSE:Linux Enterprise Server 15 SP3-LTSS
before 14.2-150100.8.45.1
14.2-150100.8.45.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
before 14.2-150100.8.45.1
14.2-150100.8.45.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
before 14.2-150100.8.45.1
14.2-150100.8.45.1
gdb
SUSE:Enterprise Storage 7.1
before 14.2-150100.8.45.1
14.2-150100.8.45.1
gdb
SUSE:Linux Enterprise Module for Development Tools 15 SP5
before 14.2-150400.15.20.1
14.2-150400.15.20.1
gdb
SUSE:Linux Enterprise Module for Development Tools 15 SP6
before 14.2-150400.15.20.1
14.2-150400.15.20.1
gdb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
before 14.2-150400.15.20.1
14.2-150400.15.20.1
gdb
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
before 14.2-150400.15.20.1
14.2-150400.15.20.1
gdb
SUSE:Linux Enterprise Server 15 SP4-LTSS
before 14.2-150400.15.20.1
14.2-150400.15.20.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
before 14.2-150400.15.20.1
14.2-150400.15.20.1
gdb
openSUSE:Leap 15.5
before 14.2-150400.15.20.1
14.2-150400.15.20.1
gdb-testresults
openSUSE:Leap 15.5
before 14.2-150400.15.20.1
14.2-150400.15.20.1
gdb
openSUSE:Leap 15.6
before 14.2-150400.15.20.1
14.2-150400.15.20.1
gdb-testresults
openSUSE:Leap 15.6
before 14.2-150400.15.20.1
14.2-150400.15.20.1
binutils
Ubuntu:Pro:14.04:LTS
All versions, plus listed versions
2.23.52.20130913-0ubuntu12.23.90.20131017-1ubuntu12.23.90.20131116-1ubuntu12.23.91.20131123-1ubuntu12.24-1ubuntu1
Show 20 moreShow less
2.24-1ubuntu22.24-2ubuntu12.24-2ubuntu22.24-2ubuntu32.24-4ubuntu12.24-5ubuntu12.24-5ubuntu22.24-5ubuntu32.24-5ubuntu3.12.24-5ubuntu132.24-5ubuntu142.24-5ubuntu14.12.24-5ubuntu14.22.24-5ubuntu14.2+esm12.24-5ubuntu14.2+esm22.24-5ubuntu14.2+esm32.24-5ubuntu14.2+esm52.24-5ubuntu14.2+esm62.24-5ubuntu14.2+esm72.24-5ubuntu14.2+esm8
None known
binutils
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
2.25.1-6ubuntu12.25.51.20151022-0ubuntu22.25.51.20151022-0ubuntu32.25.51.20151027-0ubuntu12.25.51.20151028-0ubuntu1
Show 37 moreShow less
2.25.51.20151106-0ubuntu12.25.51.20151113-1ubuntu12.25.51.20151113-2ubuntu12.25.90.20151125-1ubuntu12.25.90.20151125-2ubuntu12.25.90.20151211-0ubuntu12.25.90.20151211-0ubuntu22.25.90.20160101-1ubuntu12.25.90.20160101-1ubuntu22.26-2ubuntu12.26-3ubuntu12.26-4ubuntu12.26-5ubuntu12.26-6ubuntu12.26-7ubuntu22.26-8ubuntu12.26-8ubuntu22.26-8ubuntu2.12.26.1-1ubuntu1~16.042.26.1-1ubuntu1~16.04.12.26.1-1ubuntu1~16.04.32.26.1-1ubuntu1~16.04.42.26.1-1ubuntu1~16.04.52.26.1-1ubuntu1~16.04.62.26.1-1ubuntu1~16.04.72.26.1-1ubuntu1~16.04.82.26.1-1ubuntu1~16.04.8+esm12.26.1-1ubuntu1~16.04.8+esm32.26.1-1ubuntu1~16.04.8+esm42.26.1-1ubuntu1~16.04.8+esm52.26.1-1ubuntu1~16.04.8+esm62.26.1-1ubuntu1~16.04.8+esm72.26.1-1ubuntu1~16.04.8+esm92.26.1-1ubuntu1~16.04.8+esm112.26.1-1ubuntu1~16.04.8+esm122.26.1-1ubuntu1~16.04.8+esm132.26.1-1ubuntu1~16.04.8+esm14
None known
binutils
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
2.29.1-4ubuntu12.29.1-6ubuntu12.29.1-7ubuntu12.29.1-8ubuntu12.29.1-10ubuntu1
Show 25 moreShow less
2.29.1-12ubuntu12.30-4ubuntu12.30-5ubuntu12.30-7ubuntu12.30-8ubuntu12.30-9ubuntu12.30-10ubuntu12.30-11ubuntu12.30-14ubuntu22.30-15ubuntu12.30-20ubuntu2~18.042.30-21ubuntu1~18.042.30-21ubuntu1~18.04.12.30-21ubuntu1~18.04.22.30-21ubuntu1~18.04.32.30-21ubuntu1~18.04.42.30-21ubuntu1~18.04.52.30-21ubuntu1~18.04.72.30-21ubuntu1~18.04.82.30-21ubuntu1~18.04.92.30-21ubuntu1~18.04.9+esm12.30-21ubuntu1~18.04.9+esm32.30-21ubuntu1~18.04.9+esm42.30-21ubuntu1~18.04.9+esm52.30-21ubuntu1~18.04.9+esm13
None known
binutils
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
2.33-2ubuntu12.33.1-1ubuntu12.33.1-5ubuntu12.33.1-6ubuntu12.33.1-6ubuntu3
Show 18 moreShow less
2.33.90.20200122-1ubuntu22.34-1ubuntu12.34-3ubuntu12.34-4ubuntu12.34-5ubuntu12.34-6ubuntu12.34-6ubuntu1.12.34-6ubuntu1.32.34-6ubuntu1.42.34-6ubuntu1.52.34-6ubuntu1.62.34-6ubuntu1.72.34-6ubuntu1.82.34-6ubuntu1.92.34-6ubuntu1.102.34-6ubuntu1.112.34-6ubuntu1.11+esm12.34-6ubuntu1.11+esm2
None known
binutils
Ubuntu:22.04:LTS
All versions, plus listed versions
2.37-7ubuntu12.37-9ubuntu12.37-10ubuntu12.37.50.20220106-2ubuntu12.37.90.20220126-0ubuntu1
Show 16 moreShow less
2.37.90.20220130-0ubuntu22.38-1ubuntu12.38-2ubuntu12.38-3ubuntu12.38-4ubuntu22.38-4ubuntu2.12.38-4ubuntu2.22.38-4ubuntu2.32.38-4ubuntu2.42.38-4ubuntu2.52.38-4ubuntu2.62.38-4ubuntu2.72.38-4ubuntu2.82.38-4ubuntu2.102.38-4ubuntu2.112.38-4ubuntu2.12
None known
binutils
openSUSE:Tumbleweed
before 2.41-1.2
2.41-1.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-48064 is a medium vulnerability (CVSS 5.5) in Gnu Binutils, published August 22, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.61%, the 49th percentile. Fixed in gdb 11.2-6.

References

Show 79 moreShow less
This page doesn't list everything

Left out here: the rest of 7 source descriptions. The JSON record has them.

MoveEnter Open