← All advisories

Unrated severityNVD Advisory· Published Jun 22, 2022· Updated Aug 3, 2024

CVE-2022-34299

CVE-2022-34299

Description

There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.

Affected products

9

libdwarf/libdwarfdescription
Libdwarf Project/Libdwarfllm-fuzzy
Range: 0.4.0
osv-coords7 versions
pkg:deb/ubuntu/dwarfutils@20120410-2+deb7u2build0.16.04.1?arch=source&distro=esm-apps/xenial pkg:deb/ubuntu/dwarfutils@20180129-1?arch=source&distro=esm-apps/bionic pkg:deb/ubuntu/dwarfutils@20200114-1?arch=source&distro=esm-apps/focal pkg:deb/ubuntu/dwarfutils@20210528-1?arch=source&distro=jammy pkg:deb/ubuntu/dwarfutils@20210528-1build2?arch=source&distro=noble pkg:deb/ubuntu/dwarfutils@20210528-1build2?arch=source&distro=oracular pkg:deb/ubuntu/dwarfutils@20210528-1build2?arch=source&distro=plucky
>= 0+ 6 more
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0

Patches

Vulnerability mechanics

References

2

github.com/davea42/libdwarf-code/commit/7ef09e1fc9ba07653dd078edb2408631c7969162mitrex_refsource_MISC
github.com/davea42/libdwarf-code/issues/119mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.