{"affected":[{"product":"n/a","source":"CNA: mitre","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*","versionEndIncluding":"2.39","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2022-38533","cwes":["CWE-787"],"description":"In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.","epss":{"date":"2026-11-02","percentile":0.2681,"score":0.00334},"exploits":[],"kev":null,"metrics":[{"score":5.5,"severity":"medium","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1793661431497,"publishedAt":1661385600000,"references":[{"source":"CNA: mitre","tags":[],"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29482"},{"source":"CNA: mitre","tags":[],"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29482#c2"},{"source":"CNA: mitre","tags":[],"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29495"},{"source":"CNA: mitre","tags":[],"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=45d92439aebd0386ef8af76e1796d08cfe457e1d"},{"source":"CNA: mitre","tags":[],"url":"https://github.com/bminor/binutils-gdb/commit/45d92439aebd0386ef8af76e1796d08cfe457e1d"},{"source":"CNA: mitre","tags":[],"url":"https://security.netapp.com/advisory/ntap-20221104-0007/"},{"source":"CNA: mitre","tags":["vendor-advisory"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q/"},{"source":"CNA: mitre","tags":["vendor-advisory"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ/"},{"source":"CNA: mitre","tags":["vendor-advisory"],"url":"https://security.gentoo.org/glsa/202309-15"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29482"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29482#c2"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29495"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=45d92439aebd0386ef8af76e1796d08cfe457e1d"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://github.com/bminor/binutils-gdb/commit/45d92439aebd0386ef8af76e1796d08cfe457e1d"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://security.netapp.com/advisory/ntap-20221104-0007/"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q/"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ/"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://security.gentoo.org/glsa/202309-15"},{"source":"cve@mitre.org","tags":[],"url":"https://github.com/bminor/binutils-gdb/commit/45d92439aebd0386ef8af76e1796d08cfe457e1d"},{"source":"cve@mitre.org","tags":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q/"},{"source":"cve@mitre.org","tags":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ/"},{"source":"cve@mitre.org","tags":[],"url":"https://security.gentoo.org/glsa/202309-15"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20221104-0007/"},{"source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"],"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29482"},{"source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"],"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29482#c2"},{"source":"cve@mitre.org","tags":[],"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29495"},{"source":"cve@mitre.org","tags":[],"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=45d92439aebd0386ef8af76e1796d08cfe457e1d"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://github.com/bminor/binutils-gdb/commit/45d92439aebd0386ef8af76e1796d08cfe457e1d"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://security.gentoo.org/glsa/202309-15"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20221104-0007/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"],"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29482"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"],"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29482#c2"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29495"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=45d92439aebd0386ef8af76e1796d08cfe457e1d"}],"remediation":[{"kind":"fix","source":"cve@mitre.org","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29482"},{"kind":"fix","source":"cve@mitre.org","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29482#c2"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29482"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29482#c2"}],"revision":"793687327d890bded79eab60a49a7d6905d993ffcb9f75ac8d1ee7550eba4249","sources":[{"modifiedAt":1793657587677,"name":"CNA: mitre","retrievedAt":1793660907503,"url":"https://www.cve.org/CVERecord?id=CVE-2022-38533"},{"modifiedAt":1793661431497,"name":"NVD","retrievedAt":1793665049651,"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38533"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793660907971,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-38533"}],"ssvc":{"assessedAt":1791493942899,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2022-38533","updatedAt":1793665049651}