CVE-2022-34299: High severity Libdwarf Project Libdwarf vulnerability
Published Jun 22, 2022
·Updated
There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarfglobalformrefb.
Affected Software
5 affected componentsFixes available
Libdwarf Project Libdwarf=0.4.0
debian/dwarfutils*
debian/dwarfutils<1:0.11.1-1
1:0.11.1-1
debian/dwarfutils<1:0.11.1-1
1:0.11.1-1
debian/dwarfutils<=20210528-1
1:0.11.1-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/dwarfutilsto a version that resolves this vulnerability.Fixed in 1:0.11.1-1
Event History
Jun 22, 2022
CVE Published
via MITRE·02:35 PM
Data Sourced
via MITRE·02:35 PM
Description
Jun 23, 2022
Data Sourced
via OSV·05:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-34299?
CVE-2022-34299 has been categorized as a moderate severity vulnerability due to its potential impact on application stability.
2
How do I fix CVE-2022-34299?
To fix CVE-2022-34299, upgrade to a patched version of libdwarf beyond 0.4.0.
3
What is the nature of the vulnerability in CVE-2022-34299?
CVE-2022-34299 is a heap-based buffer over-read vulnerability occurring in libdwarf 0.4.0.
4
Which software is affected by CVE-2022-34299?
CVE-2022-34299 affects libdwarf version 0.4.0 specifically.
5
What function is related to CVE-2022-34299?
CVE-2022-34299 is related to the function dwarf_global_formref_b in libdwarf.