OSV-2023-940

    Dashboard / Vulnerabilities / OSV-2023-940

    OSV-2023-940

    Published: 1 Oct 2023Last Modified: 1 Oct 2023

    Summary: Heap-buffer-overflow in _dwarf_memcpy_swap_bytes

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62842 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: _dwarf_memcpy_swap_bytes fill_in_uni_arch_64 _dwarf_macho_setup ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62842

    Affected packages

    Package

    Name: libdwarf

    Purl: pkg:generic/libdwarf

    Affected ranges

    Type: GIT

    Events:

    Introduced- e612fb75b2b75ff78f550aea7c659799432f5bb4
    Fixed -e8df98c5c6629b75402b8ea5e5a44797fb3ae4b3

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-940 | CVE-DB