Bug 2188562 (CVE-2023-2222)

Summary:	CVE-2023-2222 binutils: objdump SEGV in concat_filename() at dwarf2.c:2060
Product:	[Other] Security Response	Reporter:	Dhananjay Arunesh <darunesh>
Component:	vulnerability	Assignee:	Nobody <nobody>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	ailan, bdettelb, caswilli, dffrench, dkuc, fjansen, fweimer, gdb-bugs, gzaronik, hbraun, hkataria, ikanias, jary, jburrell, jmitchel, jtanner, kaycoth, keiths, kshier, mcermak, micjohns, mpolacek, mprchlik, ngough, nickc, ohudlick, psegedy, rgodfrey, rjones, rravi, sipoyare, sthirugn, tohughes, tsasak, virt-maint
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A vulnerability was found in binutils, where SEGV of objdump caused by READ memory access at concat_filename() at dwarf2.c	Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-09-29 11:42:57 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2188576, 2188577, 2188578, 2188579, 2188580, 2188581, 2188582, 2188583, 2188584, 2188585, 2189852, 2189853, 2189854, 2189855, 2189856, 2189857
Bug Blocks:	2157097, 2188564

Description Dhananjay Arunesh 2023-04-21 07:47:38 UTC

A vulnerability was found in binutils where, objdump SEGV in concat_filename() at dwarf2.c:2060.

References:
https://sourceware.org/bugzilla/show_bug.cgi?id=29936
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8af23b30edbaedf009bc9b243cd4dfa10ae1ac09

Comment 1 Dhananjay Arunesh 2023-04-21 07:57:18 UTC

*** Bug 2165857 has been marked as a duplicate of this bug. ***

Comment 3 Dhananjay Arunesh 2023-04-21 08:50:39 UTC

Created binutils tracking bugs for this issue:

Affects: fedora-all [bug 2188576]


Created mingw-binutils tracking bugs for this issue:

Affects: fedora-all [bug 2188577]