OSV-2023-501

    Dashboard / Vulnerabilities / OSV-2023-501

    OSV-2023-501

    Published: 20 Jun 2023Last Modified: 20 Jun 2023

    Summary: UNKNOWN READ in _dwarf_exec_frame_instr

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59950 ``` Crash type: UNKNOWN READ Crash state: _dwarf_exec_frame_instr _dwarf_get_fde_info_for_a_pc_row dwarf_get_fde_info_for_all_regs3 ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59950

    Affected packages

    Package

    Name: libdwarf

    Purl: pkg:generic/libdwarf

    Affected ranges

    Type: GIT

    Events:

    Introduced- 5612eff9f1a40229690fd0e61083101df85e776b
    Fixed -b7437c9e4923906e9b3f3860a0c8a8289cff0a91

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-501 | CVE-DB