Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-uqym-35ay-uua8
Vulnerability ID VCID-uqym-35ay-uua8
Aliases CVE-2022-4285
Summary Multiple vulnerabilities have been found in GNU Binutils, the worst of which could result in denial of service.
Status Published
Exploitability 0.5
Weighted Severity 5.0
Risk 2.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-476 NULL Pointer Dereference
System Score Found at
cvssv3 5.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-4285.json
epss 0.00057 https://api.first.org/data/v1/epss?cve=CVE-2022-4285
epss 0.00057 https://api.first.org/data/v1/epss?cve=CVE-2022-4285
epss 0.00057 https://api.first.org/data/v1/epss?cve=CVE-2022-4285
epss 0.00057 https://api.first.org/data/v1/epss?cve=CVE-2022-4285
epss 0.00057 https://api.first.org/data/v1/epss?cve=CVE-2022-4285
epss 0.00057 https://api.first.org/data/v1/epss?cve=CVE-2022-4285
epss 0.00057 https://api.first.org/data/v1/epss?cve=CVE-2022-4285
epss 0.00057 https://api.first.org/data/v1/epss?cve=CVE-2022-4285
cvssv3.1 5.5 https://bugzilla.redhat.com/show_bug.cgi?id=2150768
ssvc Track https://bugzilla.redhat.com/show_bug.cgi?id=2150768
cvssv3.1 5.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 5.5 https://security.gentoo.org/glsa/202309-15
ssvc Track https://security.gentoo.org/glsa/202309-15
cvssv3.1 5.5 https://sourceware.org/bugzilla/show_bug.cgi?id=29699
ssvc Track https://sourceware.org/bugzilla/show_bug.cgi?id=29699
cvssv3.1 5.5 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6aba1200353311e1a1f84c70
ssvc Track https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6aba1200353311e1a1f84c70
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-4285.json
https://api.first.org/data/v1/epss?cve=CVE-2022-4285
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4285
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2150768 https://bugzilla.redhat.com/show_bug.cgi?id=2150768
gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6aba1200353311e1a1f84c70 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6aba1200353311e1a1f84c70
GLSA-202309-15 https://security.gentoo.org/glsa/202309-15
RHSA-2023:2873 https://access.redhat.com/errata/RHSA-2023:2873
RHSA-2023:3269 https://access.redhat.com/errata/RHSA-2023:3269
RHSA-2023:6236 https://access.redhat.com/errata/RHSA-2023:6236
RHSA-2023:6593 https://access.redhat.com/errata/RHSA-2023:6593
RHSA-2023:7394 https://access.redhat.com/errata/RHSA-2023:7394
show_bug.cgi?id=29699 https://sourceware.org/bugzilla/show_bug.cgi?id=29699
USN-6544-1 https://usn.ubuntu.com/6544-1/
USN-6842-1 https://usn.ubuntu.com/6842-1/
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-4285.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://bugzilla.redhat.com/show_bug.cgi?id=2150768
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-28T15:40:22Z/ Found at https://bugzilla.redhat.com/show_bug.cgi?id=2150768
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://security.gentoo.org/glsa/202309-15
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-28T15:40:22Z/ Found at https://security.gentoo.org/glsa/202309-15
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://sourceware.org/bugzilla/show_bug.cgi?id=29699
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-28T15:40:22Z/ Found at https://sourceware.org/bugzilla/show_bug.cgi?id=29699
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6aba1200353311e1a1f84c70
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-28T15:40:22Z/ Found at https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6aba1200353311e1a1f84c70
Exploit Prediction Scoring System (EPSS)
Percentile 0.17919
EPSS Score 0.00057
Published At April 2, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:01:28.732892+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/202309-15 38.0.0