CVE-2022-48063 affecting package binutils for versions less than 2.37-10
Details
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.