OSV-2023-977

    Dashboard / Vulnerabilities / OSV-2023-977

    OSV-2023-977

    Published: 7 Oct 2023Last Modified: 7 Oct 2023

    Summary: Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63024 ``` Crash type: Heap-buffer-overflow READ 8 Crash state: _dwarf_memcpy_noswap_bytes fill_in_uni_arch_64 _dwarf_macho_setup ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63024

    Affected packages

    Package

    Name: libdwarf

    Purl: pkg:generic/libdwarf

    Affected ranges

    Type: GIT

    Events:

    Introduced- e612fb75b2b75ff78f550aea7c659799432f5bb4
    Fixed -3a658bd1dd7437948cecbf82bb9b24f5f6122a7d

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-977 | CVE-DB