https://bugzilla.redhat.com/show_bug.cgi?id=2102019
Bug ID: 2102019
Summary: CVE-2022-34299 libdwarf: heap buffer over-read in
dwarf_global_formref_b() in dwarf_form.c
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: trathi(a)redhat.com
CC: epel-packagers-sig(a)lists.fedoraproject.org,
jitesh.1337(a)gmail.com, michel(a)michel-slm.name,
orion(a)nwra.com, tom(a)compton.nu
Target Milestone: ---
Classification: Other
There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related
to dwarf_global_formref_b.
https://github.com/davea42/libdwarf-code/issues/119
https://github.com/davea42/libdwarf-code/commit/7ef09e1fc9ba07653dd078edb...
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2102019