Lucene search
Veracode Vulnerability DatabaseVERACODE:36939HistorySep 05, 2022 - 9:17 a.m.
Denial Of Service (DoS)
2022-09-0509:17:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
libdwarf.so
double-free
dos
_dwarf_exec_frame_instr
application crash
EPSS
0.002
Percentile
59.3%
libdwarf.so is vulnerable to denial of service. The vulnerability exists in _dwarf_exec_frame_instr function in dwarf_frame.c due to a double-free vulnerability which allows an attacker to cause an application crash via a malicious input.
References
github.com/advisories/GHSA-q3xx-pg8c-jqh6
github.com/davea42/libdwarf-code/commit/428235e3d132fb62faf7732735fdbb034d6264b4
github.com/davea42/libdwarf-code/commit/60303eb80ecc7747bf29776d545e2a5c5a76f6f8
github.com/davea42/libdwarf-code/issues/132
lists.fedoraproject.org/archives/list/[email protected]/message/IKUE4XT62AEZ3H5D6GMREYOSCMMRFXBH/
Related
openvas
openvas
Fedora: Security Advisory for libdwarf (FEDORA-2022-273a86adf0)
2022-09-18 00:00:00
redhatcve
redhatcve
CVE-2022-39170
2022-09-13 12:56:46
ubuntucve
ubuntucve
CVE-2022-39170
2022-09-02 00:00:00
cve
cve
CVE-2022-39170
2022-09-02 03:15:07
fedora
fedora
[SECURITY] Fedora 37 Update: libdwarf-0.4.2-1.fc37
2022-09-18 00:20:29
osv
osv
CVE-2022-39170
2022-09-02 03:15:07
debiancve
debiancve
CVE-2022-39170
2022-09-02 03:15:07
nessus
nessus
prion
prion
Double free
2022-09-02 03:15:00
cvelist
cvelist
CVE-2022-39170
2022-09-02 02:28:53
nvd
nvd
CVE-2022-39170
2022-09-02 03:15:07