8.1
CVSSv3

CVE-2022-34299

Published: 23/06/2022 Updated: 29/06/2022
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.1 | Impact Score: 5.2 | Exploitability Score: 2.8
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:P

Vulnerability Summary

There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libdwarf project libdwarf 0.4.0

Vendor Advisories

Debian Bug report logs - #1014493 dwarfutils: CVE-2022-34299 Package: src:dwarfutils; Maintainer for src:dwarfutils is Fabian Wolff <fabiwolff@arcorde>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Wed, 6 Jul 2022 21:06:04 UTC Severity: important Tags: security, upstream Reply or subscribe to this ...
There is a heap-based buffer over-read in libdwarf 040 This issue is related to dwarf_global_formref_b ...