SUSE CVE-2019-14249

dwarfelfloadheaders.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service division by zero via an ELF file with a zero-size section group SHTGROUP, as demonstrated by dwarfdump...

SUSE CVE-2022-32200

libdwarf 0.4.0 has a heap-based buffer over-read in dwarfcheckstringvalid in dwarfutil.c...

SUSE CVE-2022-34299

There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarfglobalformrefb...

Integer overflow in realloc call

Description Integer overflow in realloc and memcpy calls in coreanalgraphlabel. In the process of concatenating source lines based on DWARF data, the resulting size 32bit signed int can overflow. The sizes of the realloc and memcpy calls differ, and potentially can lead to writes in an unintended...

Denial Of Service (DoS)

binutils:sid is vulnerable denial of service. A NULL pointer dereference in the readanddisplayattrvalue function in binutils/dwarf.c may lead to program crash when parsing corrupt DWARF data...

[SECURITY] Fedora 37 Update: libdwarf-0.4.2-1.fc37

Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see http://www.dwarfstd.org for DWARF specification...

Fedora: Security Advisory for libdwarf (FEDORA-2022-273a86adf0)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

UBUNTU-CVE-2022-39170

libdwarf 0.4.1 has a double free in dwarfexecframeinstr in dwarfframe.c...

libdwarf 资源管理错误漏洞

libdwarf is a library and command line tool for reading and writing the DWARF2 standardized debug data format. A security vulnerability exists in versions of libdwarf prior to 0.4.1 that stems from a double release of dwarfexecframeinstr in its dwarfframe.c component...

CVE-2022-38128

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-38127

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-38127

Removed by vendor...

PT-2022-24221 · Gnu · Binutils

Name of the Vulnerable Software and Affected Versions: binutils affected versions not specified Description: The issue is related to an infinite loop that may be triggered in the display debug abbrev function in binutils/dwarf.c when opening a crafted ELF file. This could lead to a denial of...

go-toolset:ol8 security and bug fix update

delve 1.7.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.7.2-1 - Rebase to 1.7.2 - Related: rhbz2014088 golang 1.17.10-1 - Rebase to Go 1.17.10 - Resolves: rhbz2091077 go-toolset 1.17.10-1 - Rebase to Go 1.17.10 - Resolves: rhbz2091077...

libdwarf 缓冲区错误漏洞

libdwarf is a library and command line tool for reading and writing the DWARF2 standardized debug data format. A security vulnerability exists in libdwarf version 0.4.0, which stems from a heap-based buffer over-read in libdwarf...

MAL-2022-2458 Malicious code in devtools-wasm-dwarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcce82ba8d1064613c9aa2e086893c61faca2bb8b2c3b9dd5a1fbff4c79f653 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in devtools-wasm-dwarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcce82ba8d1064613c9aa2e086893c61faca2bb8b2c3b9dd5a1fbff4c79f653 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EulerOS 2.0 SP3 : binutils (EulerOS-SA-2022-1706)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An out-of-bounds flaw was found in binutils stabs functionality. The attack needs to be initiated locally where an attacker could convince a...

The vulnerability of the dwarf::cursor::uleb function in the ELF and DWARF parsing library by Libelfin allows a attacker to cause a service failure.

The vulnerability of the dwarf::cursor::uleb function in the ELF and DWARF v4 reading library is related to insufficient elimination of special elements in the request. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created ELF file...

The vulnerability of the dwarf::to_string function in the ELF and DWARF v4 file reading library Libelfin, which allows a attacker to cause a service denial

The vulnerability of the dwarf::tostring function in the ELF and DWARFv4 file reading library Libelfin is related to insufficient elimination of special elements in the request. Exploiting this vulnerability allows a remote attacker to trigger a service denial using a specially created ELF file...