UBUNTU-CVE-2024-2002
- Source
- https://ubuntu.com/security/CVE-2024-2002
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-2002.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2024-2002
- Related
- Published
- 2024-03-18T13:15:00Z
- Modified
- 2025-06-18T07:51:07Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.
- References
-
- https://ubuntu.com/security/CVE-2024-2002
- https://www.prevanders.net/dwarfbug.html#DW202402-002
- https://access.redhat.com/security/cve/CVE-2024-2002
- https://bugzilla.redhat.com/show_bug.cgi?id=2267700
- https://github.com/davea42/libdwarf-code/blob/main/bugxml/data.txt
- https://www.cve.org/CVERecord?id=CVE-2024-2002
- https://github.com/davea42/libdwarf-code/commit/404e6b1b14f60c81388d50b4239f81d461b3c3ad
Affected packages
Ubuntu:22.04:LTS / dwarfutils
Package
- Name
- dwarfutils
- Purl
- pkg:deb/ubuntu/dwarfutils@20210528-1?arch=source&distro=jammy
Ubuntu:24.10 / dwarfutils
Package
- Name
- dwarfutils
- Purl
- pkg:deb/ubuntu/dwarfutils@20210528-1ubuntu0.24.10.1?arch=source&distro=oracular
Ubuntu:24.04:LTS / dwarfutils
Package
- Name
- dwarfutils
- Purl
- pkg:deb/ubuntu/dwarfutils@20210528-1build2?arch=source&distro=noble