CVE-2014-9482 Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow remote attackers to cause a denial of service (program crash) via a crafted ELF file.
MediumCVSS 6.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow remote attackers to cause a denial of service (program crash) via a crafted ELF file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libdwarf project libdwarf | >= 2013-01-26, <= 2014-08-05 | No fix listed |
References
- [oss-security] 20141231 CVE Request, Use after free vulnerability in Dwarfdump mailing-list third-party-advisory
- [oss-security] 20150103 Re: CVE Request, Use after free vulnerability in Dwarfdump mailing-list third-party-advisory
- 71839 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory
- Debian Security Tracker CVE-2014-9482 vendor-advisory