CVE-2022-47696 is a vulnerability in GNU Binutils' objdump utility, affecting releases before 2.39.3. A specially crafted object or executable file can trigger a segmentation fault in the compare_symbols routine, causing objdump to crash. This denial-of-service issue can disrupt automated binary analysis pipelines and services that rely on objdump. The tag covers discussions about the bug's mechanics, impact on security tooling, and mitigation steps such as updating to patched Binutils versions.
-
Binutils’ objdump shipped a subtle but dangerous bug in its symbol-comparison routine that could be triggered by crafted object files to crash the tool and, in many real-world setups, take down services that rely on automated binary analysis.
Background / Overview
The vulnerability tracked as...