libdwarf Project libdwarf 2017-04-16

CPE Details

libdwarf Project libdwarf 2017-04-16
libdwarf_project
libdwarf
2017-04-16
2019-10-17
14h53 +00:00
2019-10-17
14h53 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:libdwarf_project:libdwarf:2017-04-16:*:*:*:*:*:*:*

Informations

Vendor

libdwarf_project

Product

libdwarf

Version

2017-04-16

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-27545 2023-04-15 00h00 +00:00 libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.
6.5
Medium
CVE-2020-28163 2023-04-15 00h00 +00:00 libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.
6.5
Medium
CVE-2019-14249 2019-07-24 01h30 +00:00 dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with a zero-size section group (SHT_GROUP), as demonstrated by dwarfdump.
6.5
Medium
CVE-2017-9998 2017-06-28 09h14 +00:00 The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.
6.5
Medium
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.