libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libdwarf-develUpgrade libdwarfUpgrade libdwarf-toolsUpgrade libdwarf-debuginfoUpgrade libdwarf-static | Nov 4, 2024 | Apr 16, 2023 |
| Debian | — | Upgrade dwarfutils | Jul 30, 2024 | Apr 16, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2023 |
| Suse | — | Upgrade libdwarf-toolsUpgrade libdwarf-develUpgrade libdwarf-docUpgrade libdwarf-devel-staticUpgrade libdwarf1 | Aug 9, 2024 | Apr 16, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub