A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175. A crafted input can caus...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 elfutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.176-1"}]}]

Debian:13 elfutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.176-1"}]}]

Debian:14 elfutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.176-1"}]}]

参照URL

advisory security-tracker.debian.org