UBUNTU-CVE-2020-28163

libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...

CVE-2020-28163

libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...

CVE-2020-27545

libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object...

CVE-2020-27545

libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object...

CVE-2020-28163

libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...

CVE-2020-28163

libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...

CVE-2020-27545

libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object...

CVE-2020-28163

libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...

CVE-2020-27545

libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object...

CVE-2020-28163

CVE-2020-28163 affects libdwarf prior to 20201201. A NULL pointer dereference in the dwarf_print_lines.c path occurs when a DWARF5 line-table header uses an invalid FORM for a pathname, leading to an application crash. Public vulnerability descriptions consistently cite this as the root cause; ex...

CVE-2020-27545

CVE-2020-27545 affects libdwarf: before 20201017 there is a one-byte out-of-bounds read caused by an invalid pointer dereference via an invalid line table in a crafted object. This can lead to a crash (DoS) and availability impact. The CVSS v3.1 base score is 6.5 (Medium); attack vector: Network,...

PT-2023-11765 · Libdwarf · Libdwarf

Name of the Vulnerable Software and Affected Versions: libdwarf versions prior to 20201201 Description: The issue allows a NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname in the dwarf print lines.c file. Recommendations: For...

CVE-2020-27545

libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object...

CVE-2020-28163

libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...

Denial Of Service (DoS)

libdwarf is vulnerable to Denial of Service DoS attacks. dwarfelfloadheaders.c allows a remote attacker to cause a denial of service division by zero via an ELF file with a zero-size section group...

Medium: libdwarf

Issue Overview: A double-free vulnerability was found in libdwarf's dwarfexpandframeinstructions function of the dwarfframe.c file. A carefully crafted object file could cause the 'dwarfdump' utility to do a double free in handling an error condition. This issue could cause a segmentation violati...

Amazon Linux 2023 : libdwarf, libdwarf-devel, libdwarf-static (ALAS2023-2023-093)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-093 advisory. A double-free vulnerability was found in libdwarf's dwarfexpandframeinstructions function of the dwarfframe.c file. A carefully crafted object file could cause the 'dwarfdump' utility to do a double fre...

SUSE CVE-2014-9482

Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow remote attackers to cause a denial of service program crash via a crafted ELF file...

SUSE CVE-2015-8538

dwarfleb.c in libdwarf allows attackers to cause a denial of service SIGSEGV...

SUSE CVE-2015-8750

libdwarf 20151114 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via a debugabbrev section marked NOBITS in an ELF file...