CVE-2022-32200: High severity Libdwarf Project Libdwarf vulnerability
Published Jun 1, 2022
·Updated
libdwarf 0.4.0 has a heap-based buffer over-read in dwarfcheckstringvalid in dwarfutil.c.
Affected Software
5 affected componentsFixes available
Libdwarf Project Libdwarf=0.4.0
debian/dwarfutils*
debian/dwarfutils<1:0.11.1-1
1:0.11.1-1
debian/dwarfutils<1:0.11.1-1
1:0.11.1-1
debian/dwarfutils<=20210528-1
1:0.11.1-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/dwarfutilsto a version that resolves this vulnerability.Fixed in 1:0.11.1-1
Event History
Jun 1, 2022
CVE Published
via MITRE·05:12 AM
Data Sourced
via MITRE·05:12 AM
Description
Jun 2, 2022
Data Sourced
via OSV·02:16 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-32200?
CVE-2022-32200 is classified as a moderate severity vulnerability due to its heap-based buffer over-read nature.
2
How do I fix CVE-2022-32200?
To fix CVE-2022-32200, upgrade to a fixed version of libdwarf that addresses this vulnerability.
3
What is the impact of CVE-2022-32200 on systems using libdwarf?
The impact of CVE-2022-32200 includes potential exploitation leading to information disclosure in systems utilizing libdwarf 0.4.0.
4
Which version of libdwarf is affected by CVE-2022-32200?
CVE-2022-32200 affects libdwarf version 0.4.0 specifically.
5
Is there any public exploit available for CVE-2022-32200?
As of now, there are no known public exploits specifically for CVE-2022-32200.