5.5

CVE-2022-38126: binutils

CVSS: 5.5v3.1MediumRejected
AliasesALPINE-CVE-2022-38126UBUNTU-CVE-2022-38126CGA-f3pg-gxhf-4jrg
Published 01-09-2022Last modified 13-02-2025
Open JSON

Vulnerability summary

CVE-2022-38126 is a medium (CVSS 5.5) vulnerability in binutils.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (OSV · Ubuntu), selected by version preference
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3 · Related 5
OPENSUSE-SU-2024:12631-1SUSE-SU-2022:4146-1SUSE-SU-2022:4277-1CGA-24MM-HR8R-VVP5CGA-GF6C-4J6H-X6C3

Timeline

  1. 01-09-2022
    PublishedVulnerability first disclosed.
  2. 13-02-2025
    Last modifiedVulnerability information updated.

Description

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Alpine1 product
  • binutils< 2.39-r0
Chainguard1 product
  • binutilsAll versions (No fix recorded)
Ubuntu1 product
  • binutilsAll versions (No fix recorded)
Wolfi1 product
  • binutilsAll versions (No fix recorded)

4 vendors · 4 products

References

4 links