CVE-2022-34299

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-34299
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-34299.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-34299
Downstream
Related
Published
2022-06-23T17:15:18.410Z
Modified
2026-04-12T02:57:01.969123Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVSS Calculator
Summary
[none]
Details

There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarfglobalformref_b.

References

Affected packages

Git / github.com/davea42/libdwarf-code

Affected ranges

Type
GIT
Repo
https://github.com/davea42/libdwarf-code
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6993512b8c1ebb1a52b91def4557d67eba79cfa4
Fixed
7ef09e1fc9ba07653dd078edb2408631c7969162
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.4.0"
        }
    ]
}

Affected versions

Other
20110113
20110605
20110607
20110612
20110908
20111009
20111030
20111214
20120410
20121127
20121130
20130125
20130126
20130207
20130729
20130729-b
20140131
20140208
20140413
20140519
20140805
20150112
20150115
20150310
20150507
20150913
20150915
20151114
20160116
20160507
20160613
20160923
20160929
20161001
20161021
20161124
20170416
20170709
20180129
20180527
20180723
20180724
20180809
20181024
20190505
20190529
20191002
20191104
20200114
20200703
20200719
20200825
20201020
20201201
20210305
20210528
libdwarf-0.*
libdwarf-0.1.1
libdwarf-0.2.0
libdwarf-0.3.0
libdwarf-0.3.1
libdwarf-0.3.2
libdwarf-0.3.3
libdwarf-0.3.4
libdwarf-0.4.0
v0.*
v0.3.4
v0.4.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-34299.json"
vanir_signatures 
[
    {
        "digest": {
            "length": 3791.0,
            "function_hash": "78862220269873398469667286450600140818"
        },
        "id": "CVE-2022-34299-40819a14",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/davea42/libdwarf-code/commit/7ef09e1fc9ba07653dd078edb2408631c7969162",
        "target": {
            "function": "dwarf_global_formref_b",
            "file": "src/lib/libdwarf/dwarf_form.c"
        }
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "258716398145294568082527531509394198831",
                "163769783715992938486691183309269823418",
                "339270606956719756792502860832076083990",
                "159490849568476158364029038457075306881",
                "315320428459480269092930358133969609620",
                "265780766283395225142527022282432068556"
            ]
        },
        "id": "CVE-2022-34299-6d88f717",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/davea42/libdwarf-code/commit/7ef09e1fc9ba07653dd078edb2408631c7969162",
        "target": {
            "file": "src/lib/libdwarf/dwarf_form.c"
        }
    }
]
vanir_signatures_modified 
"2026-04-12T02:57:01Z"