EUVD-2016-8363

Malware in sbrugna...

EUVD-2022-53408

Malicious code in bioql PyPI...

EUVD-2022-37256

Malicious code in bioql PyPI...

EUVD-2024-26972

Malicious code in bioql PyPI...

EUVD-2022-41715

Malicious code in bioql PyPI...

libdwarf:fuzz_crc_32: Heap-buffer-overflow in _dwarf_macho_load_dwarf_sections

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4931308642172928 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzcrc32 Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service

...

libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.

...

libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.

...

Linux Distros Unpatched Vulnerability : CVE-2022-32200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libdwarf 0.4.0 has a heap-based buffer over-read in dwarfcheckstringvalid in dwarfutil.c. CVE-2022-32200 Note that Nessus relies on the presence of the package ...

Linux Distros Unpatched Vulnerability : CVE-2022-34299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarfglobalformrefb. CVE-2022-34299 Note that Nessus relies on the presence o...

libdwarf:fuzz_globals: Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4771320878661632 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzglobals Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

NewStart CGSL MAIN 7.02 : libdwarf Vulnerability (NS-SA-2025-0125)

The remote NewStart CGSL host, running version MAIN 7.02, has libdwarf packages installed that are affected by a vulnerability: - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-2002. Reason: This candidate is a duplicate of CVE-2024-2002. Notes: All CVE users should...

TencentOS Server 4: libdwarf (TSSA-2024:0174)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0174 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: libdwarf (TSSA-2024:0169)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0169 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2022-32200

libdwarf 0.4.0 has a heap-based buffer over-read in dwarfcheckstringvalid in dwarfutil.c...

CVE-2024-2002 affecting package libdwarf for versions less than 0.9.2-1

CVE-2024-2002 affecting package libdwarf for versions less than 0.9.2-1. An upgraded version of the package is available that resolves this issue...

Azure Linux 3.0 Security Update: libdwarf (CVE-2024-2002)

The version of libdwarf installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-2002 advisory. - A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf May try t...

Linux Distros Unpatched Vulnerability : CVE-2024-2002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to deallocfree an allocation twice, potentially causin...

Linux Distros Unpatched Vulnerability : CVE-2016-5040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read and crash via a large length value in a compilation unit header...