Medium: libdwarf

Issue Overview: A flaw was found in libdwarf. A possible memory leak allows an attacker to input a specially crafted file, leading to a crash. The highest threat from this vulnerability is to system availability. CVE-2020-27545 Affected Packages: libdwarf Note: This advisory is applicable to Amaz...

Medium: libdwarf

Issue Overview: A flaw was found in libdwarf. A possible memory leak allows an attacker to input a specially crafted file, leading to a crash. The highest threat from this vulnerability is to system availability. CVE-2020-27545 Affected Packages: libdwarf Note: This advisory is applicable to Amaz...

Amazon Linux 2 : libdwarf (ALAS-2024-2688)

The version of libdwarf installed on the remote host is prior to 20130207-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2688 advisory. A flaw was found in libdwarf. A possible memory leak allows an attacker to input a specially crafted file, leading to a crash...

CBL Mariner 2.0 Security Update: libdwarf (CVE-2024-2002)

The version of libdwarf installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-2002 advisory. - A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf May try t...

CVE-2020-28163 affecting package libdwarf for versions less than 0.9.0-1

CVE-2020-28163 affecting package libdwarf for versions less than 0.9.0-1. A patched version of the package is available...

CVE-2016-8681 affecting package libdwarf for versions less than 0.9.0-1

CVE-2016-8681 affecting package libdwarf for versions less than 0.9.0-1. A patched version of the package is available...

CVE-2020-27545 affecting package libdwarf for versions less than 0.9.0-1

CVE-2020-27545 affecting package libdwarf for versions less than 0.9.0-1. A patched version of the package is available...

CVE-2019-14249 affecting package libdwarf for versions less than 0.9.0-1

CVE-2019-14249 affecting package libdwarf for versions less than 0.9.0-1. A patched version of the package is available...

OPENSUSE-SU-2024:12509-1 libdwarf-devel-0.4.2-2.1 on GA media

These are all security issues fixed in the libdwarf-devel-0.4.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12134-1 libdwarf-devel-0.4.0-3.1 on GA media

These are all security issues fixed in the libdwarf-devel-0.4.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10936-1 libdwarf-devel-20210528-1.2 on GA media

These are all security issues fixed in the libdwarf-devel-20210528-1.2 package on the GA media of openSUSE Tumbleweed...

RHEL 6 : libdwarf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libdwarf: Out-of-bounds read in dwarfleb.c CVE-2015-8538 Note that Nessus has not tested for this issue but has...

RHEL 8 : libdwarf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libdwarf: division by zero in dwarfelfloadheaders.c leading to DoS CVE-2019-14249 - libdwarf: NULL pointe...

RHEL 7 : libdwarf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libdwarf: heap-based buffer over-read in dwarfformsdata CVE-2017-9055 - Use-after-free vulnerability in...

Fedora: Security Advisory (FEDORA-2024-60627905b6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : libdwarf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libdwarf: heap-based buffer over-read in dwarfformsdata CVE-2017-9055 - The dwarfreadciefdeprefix functio...

RHEL 8 : libdwarf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libdwarf: division by zero in dwarfelfloadheaders.c leading to DoS CVE-2019-14249 Note that Nessus has not tested f...

Fedora 40 : libdwarf (2024-60627905b6)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-60627905b6 advisory. Update to latest upstream release. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CVE-2024-31745

A flaw was found in libdwarf. An attacker may use a specially-crafted file to trigger a use-after-free condition, which can potentially lead to an application crash or other unexpected behavior. Mitigation Mitigation for this issue is either not available or the currently available options don't...

CVE-2024-31745

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-2002. Reason: This candidate is a duplicate of CVE-2024-2002. Notes: All CVE users should reference CVE-2024-2002 instead of this candidate...