CVE:CVE-2022-4285
CNNVD:CNNVD-202212-3942
Fedora是Fedora社区的一套Linux操作系统。
Fedora存在代码问题漏洞，攻击者利用该漏洞可以通过 _bfd_elf_get_symbol_version_string() 在 Insight 上强制取消引用 NULL 指针，以触发拒绝服务。
solution:Upgrade gnu binutils to a higher version than 2.39-7,and avoid the version [2.35,2.39-7); Upgrade fedoraproject fedora to a higher version than 37,and avoid the version 37; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,8.0,9.0,and avoid the version 6.0,7.0,8.0,9.0