libunwind.so is vulnerable to unauthorised access. The vulnerability exists because it uses invalid dwarf opcodesDW_OP_bregXX
in the dwarf_to_unw_regnum
function in include/dwarf_i.h
, causing off-by-one error referencing beyond the end of the array.
git.savannah.gnu.org/cgit/libunwind.git/commit/?id=396b6c7ab737e2bff244d640601c436a26260ca1
rhn.redhat.com/errata/RHSA-2015-1675.html
rhn.redhat.com/errata/RHSA-2015-1768.html
rhn.redhat.com/errata/RHSA-2015-1769.html
www.securityfocus.com/bid/76707
access.redhat.com/errata/RHSA-2015:1675
access.redhat.com/errata/RHSA-2015:1768
access.redhat.com/errata/RHSA-2015:1769
access.redhat.com/security/cve/CVE-2015-3239
bugzilla.redhat.com/show_bug.cgi?id=1232265
github.com/joyent/libunwind/commit/396b6c7ab737e2bff244d640601c436a26260ca1