839 matches found
CVE-2020-27545
libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object...
CVE-2020-28163
libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...
CVE-2020-27545
libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object...
CVE-2020-28163
libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...
CVE-2020-27545
libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object...
CVE-2020-28163
libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...
libdwarf:fuzz_die_cu: Crash in _dwarf_memcpy_noswap_bytes
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4866423964172288 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzdiecu Job Type: aflasanlibdwarf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x601fffffc965 Crash State:...
libdwarf:fuzz_die_cu_print: Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5295062170075136 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzdiecuprint Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...
Denial Of Service (DoS)
libdwarf is vulnerable to Denial of Service DoS attacks. dwarfelfloadheaders.c allows a remote attacker to cause a denial of service division by zero via an ELF file with a zero-size section group...
libdwarf:fuzz_srcfiles: Heap-buffer-overflow in _dwarf_read_line_table_header
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4599045397282816 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzsrcfiles Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
libdwarf:fuzz_srcfiles: Heap-double-free in _dwarf_read_line_table_header
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=6015429578719232 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzsrcfiles Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-double-free Crash Address:...
libdwarf:fuzz_rng: Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5974595378479104 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzrng Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60400000013c...
libdwarf:fuzz_srcfiles: Heap-double-free in _dwarf_read_line_table_header
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5281689109921792 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzsrcfiles Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x615000000a80 Crash...
libdwarf:fuzz_die_cu_attrs: Invalid-free in fuzz_die_cu_attrs.c
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4845537731149824 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzdiecuattrs Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Invalid-free Crash Address: 0x604000000165 Crash...
Medium: libdwarf
Issue Overview: A double-free vulnerability was found in libdwarf's dwarfexpandframeinstructions function of the dwarfframe.c file. A carefully crafted object file could cause the 'dwarfdump' utility to do a double free in handling an error condition. This issue could cause a segmentation violati...
Amazon Linux 2023 : libdwarf, libdwarf-devel, libdwarf-static (ALAS2023-2023-093)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-093 advisory. A double-free vulnerability was found in libdwarf's dwarfexpandframeinstructions function of the dwarfframe.c file. A carefully crafted object file could cause the 'dwarfdump' utility to do a double fre...
libdwarf:fuzz_rng: Heap-buffer-overflow in read_single_rle_entry
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=6031783801257984 Project: libdwarf Fuzzing Engine: honggfuzz Fuzz Target: fuzzrng Job Type: honggfuzzasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
libdwarf:fuzz_rng: Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5105415777288192 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzrng Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...
libdwarf:fuzz_macro_dwarf5: Heap-buffer-overflow in _dwarf_create_a_new_cu_context_record_on_list
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5080340952907776 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzmacrodwarf5 Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...
libdwarf:fuzz_set_frame_all: Segv on unknown address in _dwarf_exec_frame_instr
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5081006119190528 Project: libdwarf Fuzzing Engine: honggfuzz Fuzz Target: fuzzsetframeall Job Type: honggfuzzasanlibdwarf Platform Id: linux Crash Type: Segv on unknown address Crash Address:...