{"schemaVersion":3,"id":"USN-6544-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"binutils vulnerabilities\n\nIt was discovered that GNU binutils incorrectly handled certain COFF files.\nAn attacker could possibly use this issue to cause a crash or execute\narbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2022-38533)\n\nIt was discovered that GNU binutils was not properly performing bounds\nchecks in several functions, which could lead to a buffer overflow. An\nattacker could possibly use this issue to cause a denial of service,\nexpose sensitive information or execute arbitrary code. This issue only\naffected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.\n(CVE-2022-4285, CVE-2020-19726, CVE-2021-46174)\n\nIt was discovered that GNU binutils contained a reachable assertion, which\ncould lead to an intentional assertion failure when processing certain\ncrafted DWARF files. An attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 20.04 LTS\nand Ubuntu 22.04 LTS. (CVE-2022-35205)","dates":{"published":"2023-12-11T11:18:13.000Z","modified":"2026-06-29T13:51:00.372Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"binutils","name":"binutils","label":"binutils","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/binutils","purlType":"deb","versions":[{"text":"< 2.24-5ubuntu14.2+esm6","noFixRecorded":false,"fixedIn":null},{"text":"< 2.34-6ubuntu1.7","noFixRecorded":false,"fixedIn":null},{"text":"< 2.38-4ubuntu2.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24-5ubuntu14.2+esm6 | < 2.34-6ubuntu1.7 | < 2.38-4ubuntu2.4","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-6544-1","label":"ubuntu.com/security/notices/USN-6544-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-19726","label":"ubuntu.com/security/CVE-2020-19726","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-46174","label":"ubuntu.com/security/CVE-2021-46174","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-4285","label":"ubuntu.com/security/CVE-2022-4285","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-35205","label":"ubuntu.com/security/CVE-2022-35205","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-38533","label":"ubuntu.com/security/CVE-2022-38533","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2020-19726","CVE-2021-46174","CVE-2022-35205","CVE-2022-38533","CVE-2022-4285"],"downstream":[],"duplicates":[],"related":["CVE-2020-19726","CVE-2021-46174","CVE-2022-35205","CVE-2022-38533","CVE-2022-4285"]},"timeline":[{"kind":"published","date":"2023-12-11T11:18:13.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-29T13:51:00.372Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T13:59:54.239Z","stale":false,"partial":false}}