REDHAT-BUG-1178725: Use After Free
Published Jan 5, 2015
·Updated
Use-after-free vulnerability was reported in libdwarf [1]. If dwarfdump is passed a corrupted ELF file, 'DwarfDebug' object will be freed in 'dwarfelfobjectaccessfinish', but then this object is being referenced later in 'printerror':
-------------------------------- res = dwarfobjectinit(binaryinterface, errhand, errarg, retdbg, error); if (res != DWDLVOK){ dwarfelfobjectaccessfinish(binaryinterface); } -------------------------------- ... -------------------------- if (obj->object) { dwarfelfobjectaccessinternalst internals = (dwarfelfobjectaccessinternalst )obj->object; --------------------------
[1]: https://bugzilla.redhat.com/showbug.cgi?id=1177758
Affected Software
1 affected component
libdwarf libdwarf
Event History
Jan 5, 2015
Data Sourced
12:09 PM
DescriptionSeverityAffected Software