OSV-2022-389

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libdwarf/OSV-2022-389.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-389
Published
2022-05-01T00:01:57.432738Z
Modified
2022-05-01T00:01:57.432994Z
Summary
Global-buffer-overflow in _dwarf_pathjoinl
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47150

Crash type: Global-buffer-overflow READ 1
Crash state:
_dwarf_pathjoinl
_dwarf_construct_linkedto_path
dwarf_gnu_debuglink
References

Affected packages

OSS-Fuzz / libdwarf

Package

Name
libdwarf
Purl
pkg:generic/libdwarf

Affected ranges

Type
GIT
Repo
https://github.com/davea42/libdwarf-code
Events
Introduced
6af6e566ae71b585659484e7be7cbab83dd770fb
Fixed
24dff940cc4c71a9c3cb5475aee231b19163a12c

Affected versions

libdwarf-0.*

libdwarf-0.4.1

v0.*

v0.4.1

Ecosystem specific 

{
    "severity": null
}