Lucene search
Veracode Vulnerability DatabaseVERACODE:36939HistorySep 05, 2022 - 9:17 a.m.
Denial Of Service (DoS)
2022-09-0509:17:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.002 Low
EPSS
Percentile
59.4%
libdwarf.so is vulnerable to denial of service. The vulnerability exists in _dwarf_exec_frame_instr function in dwarf_frame.c due to a double-free vulnerability which allows an attacker to cause an application crash via a malicious input.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libdwarf.so | le | 1.20180129.0 | |
| libdwarf.so | le | 1.20180129.0 |
References
github.com/advisories/GHSA-q3xx-pg8c-jqh6
github.com/davea42/libdwarf-code/commit/428235e3d132fb62faf7732735fdbb034d6264b4
github.com/davea42/libdwarf-code/commit/60303eb80ecc7747bf29776d545e2a5c5a76f6f8
github.com/davea42/libdwarf-code/issues/132
lists.fedoraproject.org/archives/list/[email protected]/message/IKUE4XT62AEZ3H5D6GMREYOSCMMRFXBH/
Related
fedora
fedora
[SECURITY] Fedora 37 Update: libdwarf-0.4.2-1.fc37
2022-09-18 00:20:29
openvas
openvas
Fedora: Security Advisory for libdwarf (FEDORA-2022-273a86adf0)
2022-09-18 00:00:00
cve
cve
CVE-2022-39170
2022-09-02 03:15:07
ubuntucve
ubuntucve
CVE-2022-39170
2022-09-02 00:00:00
redhatcve
redhatcve
CVE-2022-39170
2022-09-13 12:56:46
debiancve
debiancve
CVE-2022-39170
2022-09-02 03:15:07
nessus
nessus
prion
prion
Double free
2022-09-02 03:15:00
osv
osv
CVE-2022-39170
2022-09-02 03:15:07
cvelist
cvelist
CVE-2022-39170
2022-09-02 02:28:53
nvd
nvd
CVE-2022-39170
2022-09-02 03:15:07