Libdwarf CVE-2022-39170

HIGH

Double Free (CWE-415)

2022-09-02 cve@mitre.org

Information Disclosure Libdwarf Fedora

8.8

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Sep 02, 2022 - 03:15 nvd

HIGH 8.8

DescriptionNVD

libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.

AnalysisAI

libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-415. libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c. Affected products include: Libdwarf Project Libdwarf, Fedoraproject Fedora.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Libdwarf

View all

CVE-2016-9558 CRITICAL Act Now POC

(1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have uns

CVE-2022-34299 HIGH This Week POC

There is a heap-based buffer over-read in libdwarf 0.4.0. Rated high severity (CVSS 8.1), this vulnerability is remotely

CVE-2016-5042 HIGH This Week POC

The dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause a denial of service (in

CVE-2022-32200 HIGH This Week POC

libdwarf 0.4.0 has a heap-based buffer over-read in _dwarf_check_string_valid in dwarf_util.c. Rated high severity (CVSS

CVE-2016-5044 HIGH This Week POC

The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial

CVE-2016-5043 HIGH This Week POC

The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-boun

CVE-2016-5040 HIGH This Week POC

libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large

CVE-2016-5039 HIGH This Week POC

The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bou

CVE-2016-5038 HIGH This Week POC

The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to caus

CVE-2016-5036 HIGH This Week POC

The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of ser

CVE-2016-5041 HIGH This Week POC

dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereferenc

CVE-2016-8680 MEDIUM This Month POC

The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to caus

Same weakness CWE-415 – Double Free

View all

CVE-2014-0502 HIGH POC

CVE-2023-25136 MEDIUM POC

CVE-2014-1767 HIGH POC

CVE-2016-5768 CRITICAL POC

CVE-2016-5772 CRITICAL POC

CVE-2016-3132 CRITICAL POC

CVE-2017-6074 HIGH POC

CVE-2017-9287 MEDIUM POC

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2022-39170 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy