6.5
CVE-2020-28163
- EPSS 0.79%
- Veröffentlicht 16.04.2023 00:15:07
- Zuletzt bearbeitet 06.02.2025 17:15:11
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Libdwarf Project ≫ Libdwarf Version < 2020-12-01
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.79% | 0.513 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
http://web.archive.org/web/20190601140703/https://sourceforge.net/projects/libdwarf/
https://bugzilla.redhat.com/show_bug.cgi?id=2026000
https://github.com/davea42/libdwarf-code/commit/faf99408e3f9f706fc3809dd400e831f989778d3
https://www.prevanders.net/dwarfbug.html#DW202010-003