CVE-2015-3239 Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.
LowCVSS 3.3
EPSS 0.50%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/racket(Ubuntu:22.04) | All versions | No fix listed |
| debian/android-platform-external-libunwind(Debian:12) | < 7.0.0+r1-4 | 7.0.0+r1-4 |
| debian/android-platform-external-libunwind(Debian:13) | < 7.0.0+r1-4 | 7.0.0+r1-4 |
| debian/libunwind(Debian:12) | < 1.1-4 | 1.1-4 |
| debian/libunwind(Debian:13) | < 1.1-4 | 1.1-4 |
| debian/libunwind(Debian:14) | < 1.1-4 | 1.1-4 |
| libunwind project libunwind | = 1.1 | No fix listed |
| ubuntu/racket(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/racket(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/racket(Ubuntu:26.10) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2015-3239 vendor-advisory
- git.savannah.gnu.org
- RHSA-2015:1675 vendor-advisory
- RHSA-2015:1768 vendor-advisory
- RHSA-2015:1769 vendor-advisory
- 76707 vdb-entry
- bugzilla.redhat.com exploit
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking