CVE catalog

CVE-2022-47011

binutils affected and fixed versions

[CVE catalog]

An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.39% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixiebinutils2.38.50.20220627-1FixedDistribution-reported fixed boundary[CVE-2022-47011]
Debiantrixiebinutils2.44-3Fixed[CVE-2022-47011]
Debiansidbinutils2.38.50.20220627-1FixedDistribution-reported fixed boundary[CVE-2022-47011]
Debiansidbinutils2.47.50.20261021-1Fixed[CVE-2022-47011]
Debianforkybinutils2.38.50.20220627-1FixedDistribution-reported fixed boundary[CVE-2022-47011]
Debianforkybinutils2.47.50.20261021-1Fixed[CVE-2022-47011]
Debianbookwormbinutils2.38.50.20220627-1FixedDistribution-reported fixed boundary[CVE-2022-47011]
Debianbookwormbinutils2.40-2Fixed[CVE-2022-47011]

Showing 8 fix observations. All 69 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedbinutils2.38.50.20220627-1UnknownSource applicability is not establishedProvider not reported
Debianbookwormbinutils2.38.50.20220627-1FixedDistribution-reported fixed boundary[CVE-2022-47011]
Debianbookwormbinutils2.40-2Fixed[CVE-2022-47011]
Debianforkybinutils2.38.50.20220627-1FixedDistribution-reported fixed boundary[CVE-2022-47011]
Debianforkybinutils2.47.50.20261021-1Fixed[CVE-2022-47011]
Debiansidbinutils2.38.50.20220627-1FixedDistribution-reported fixed boundary[CVE-2022-47011]
Debiansidbinutils2.47.50.20261021-1Fixed[CVE-2022-47011]
Debiantrixiebinutils2.38.50.20220627-1FixedDistribution-reported fixed boundary[CVE-2022-47011]
Debiantrixiebinutils2.44-3Fixed[CVE-2022-47011]
Ubuntu20.04binutils2.33-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.33.1-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.33.1-5ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.33.1-6ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.33.1-6ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.33.90.20200122-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.34-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.34-3ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.34-4ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.34-5ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.34-6ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.34-6ubuntu1.1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.34-6ubuntu1.3UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.34-6ubuntu1.4UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.34-6ubuntu1.5UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.34-6ubuntu1.6UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.34-6ubuntu1.7UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu20.04binutils2.34-6ubuntu1.8UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.37-10ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.37-7ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.37-9ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.37.50.20220106-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.37.90.20220126-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.37.90.20220130-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.38-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.38-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.38-3ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.38-4ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.38-4ubuntu2.1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.38-4ubuntu2.2UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.38-4ubuntu2.3UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.38-4ubuntu2.4UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntu22.04binutils2.38-4ubuntu2.5UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.29.1-10ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.29.1-12ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.29.1-4ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.29.1-6ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.29.1-7ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.29.1-8ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-10ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-11ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-14ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-15ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-20ubuntu2~18.04UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-21ubuntu1~18.04UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-21ubuntu1~18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-21ubuntu1~18.04.2UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-21ubuntu1~18.04.3UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-21ubuntu1~18.04.4UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-21ubuntu1~18.04.5UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-21ubuntu1~18.04.7UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-21ubuntu1~18.04.8UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-21ubuntu1~18.04.9UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-21ubuntu1~18.04.9+esm1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-21ubuntu1~18.04.9+esm3UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-4ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-5ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-7ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-8ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Ubuntuprobinutils2.30-9ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-47011]
Original provider fields
{
  "package_releases": [
    {
      "name": "binutils",
      "status": "fixed",
      "release": "sid",
      "version": "2.47.50.20261021-1"
    },
    {
      "name": "binutils",
      "status": "fixed",
      "release": "forky",
      "version": "2.47.50.20261021-1"
    },
    {
      "name": "binutils",
      "status": "fixed",
      "release": "trixie",
      "version": "2.44-3"
    },
    {
      "name": "binutils",
      "status": "fixed",
      "release": "bookworm",
      "version": "2.40-2"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "binutils",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "unimportant",
      "fixed_version": "2.38.50.20220627-1"
    },
    {
      "bug": null,
      "name": "binutils",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "unimportant",
      "fixed_version": "2.38.50.20220627-1"
    },
    {
      "bug": null,
      "name": "binutils",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "unimportant",
      "fixed_version": "2.38.50.20220627-1"
    },
    {
      "bug": null,
      "name": "binutils",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": "2.38.50.20220627-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "binutils",
      "fixed_version": "2.38.50.20220627-1",
      "applicability_unknown": true
    },
    {
      "name": "binutils",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.30-21ubuntu1~18.04.9+esm3"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2.29.1-4ubuntu1",
        "2.29.1-6ubuntu1",
        "2.29.1-7ubuntu1",
        "2.29.1-8ubuntu1",
        "2.29.1-10ubuntu1",
        "2.29.1-12ubuntu1",
        "2.30-4ubuntu1",
        "2.30-5ubuntu1",
        "2.30-7ubuntu1",
        "2.30-8ubuntu1",
        "2.30-9ubuntu1",
        "2.30-10ubuntu1",
        "2.30-11ubuntu1",
        "2.30-14ubuntu2",
        "2.30-15ubuntu1",
        "2.30-20ubuntu2~18.04",
        "2.30-21ubuntu1~18.04",
        "2.30-21ubuntu1~18.04.1",
        "2.30-21ubuntu1~18.04.2",
        "2.30-21ubuntu1~18.04.3",
        "2.30-21ubuntu1~18.04.4",
        "2.30-21ubuntu1~18.04.5",
        "2.30-21ubuntu1~18.04.7",
        "2.30-21ubuntu1~18.04.8",
        "2.30-21ubuntu1~18.04.9",
        "2.30-21ubuntu1~18.04.9+esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-47011",
      "fixed_version": "2.30-21ubuntu1~18.04.9+esm3",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-47011",
      "provider_updated_at": "2026-04-22T13:31:13.603926Z",
      "applicability_unknown": true
    },
    {
      "name": "binutils",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.34-6ubuntu1.8"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "2.33-2ubuntu1",
        "2.33.1-1ubuntu1",
        "2.33.1-5ubuntu1",
        "2.33.1-6ubuntu1",
        "2.33.1-6ubuntu3",
        "2.33.90.20200122-1ubuntu2",
        "2.34-1ubuntu1",
        "2.34-3ubuntu1",
        "2.34-4ubuntu1",
        "2.34-5ubuntu1",
        "2.34-6ubuntu1",
        "2.34-6ubuntu1.1",
        "2.34-6ubuntu1.3",
        "2.34-6ubuntu1.4",
        "2.34-6ubuntu1.5",
        "2.34-6ubuntu1.6",
        "2.34-6ubuntu1.7"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-47011",
      "fixed_version": "2.34-6ubuntu1.8",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-47011",
      "provider_updated_at": "2026-04-22T13:31:13.603926Z",
      "applicability_unknown": true
    },
    {
      "name": "binutils",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.38-4ubuntu2.5"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "2.37-7ubuntu1",
        "2.37-9ubuntu1",
        "2.37-10ubuntu1",
        "2.37.50.20220106-2ubuntu1",
        "2.37.90.20220126-0ubuntu1",
        "2.37.90.20220130-0ubuntu2",
        "2.38-1ubuntu1",
        "2.38-2ubuntu1",
        "2.38-3ubuntu1",
        "2.38-4ubuntu2",
        "2.38-4ubuntu2.1",
        "2.38-4ubuntu2.2",
        "2.38-4ubuntu2.3",
        "2.38-4ubuntu2.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-47011",
      "fixed_version": "2.38-4ubuntu2.5",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-47011",
      "provider_updated_at": "2026-04-22T13:31:13.603926Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [binutils]Unknown
    Details (2)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • [binutils-dev]Unknown

    Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • [binutils-doc]Unknown

    Source package: [binutils]

    Details (2)
    • 2.40-2 · all · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

    • 2.40-2 · all · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · all · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

    • 2.40-2 · all · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.38.50.20220627-1

      dsa · binutils · debian · bookworm

Next results

Observed:

References