CVE-2020-28163
libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
За последние 30 дней в dwarfutils опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 3
libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.
libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.
libdwarf 0.4.0 has a heap-based buffer over-read in _dwarf_check_string_valid in dwarf_util.c.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.