Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-27545

Опубликовано: 22 нояб. 2021
Источник: redhat
CVSS3: 6.5
EPSS Низкий

Описание

libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.

A flaw was found in libdwarf. A possible memory leak allows an attacker to input a specially crafted file, leading to a crash. The highest threat from this vulnerability is to system availability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 7libdwarfOut of support scope
Red Hat Enterprise Linux 8libdwarfWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=2026683libdwarf: carefully corrupted line table can crash calling app

EPSS

Процентиль: 54%
0.00823
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 3 лет назад

libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.

CVSS3: 6.5
nvd
больше 3 лет назад

libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.

CVSS3: 6.5
msrc
11 месяцев назад

libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.

CVSS3: 6.5
debian
больше 3 лет назад

libdwarf before 20201017 has a one-byte out-of-bounds read because of ...

suse-cvrf
около 3 лет назад

Security update for libdwarf

EPSS

Процентиль: 54%
0.00823
Низкий

6.5 Medium

CVSS3