Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-27545: A flaw was found in libdwarf. A possible memory leak allows an attacker to input a specially crafted file, leading to a crash. The highest threat from this vulnerability is to system availability.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libdwarf | 0:20130207-4.amzn2.0.3 |
| Amazon Linux · 2 | libdwarf-debuginfo | 0:20130207-4.amzn2.0.3 |
| Amazon Linux · 2 | libdwarf-devel | 0:20130207-4.amzn2.0.3 |
| Amazon Linux · 2 | libdwarf-static | 0:20130207-4.amzn2.0.3 |
| Amazon Linux · 2 | libdwarf-tools | 0:20130207-4.amzn2.0.3 |
Vulnerabilities 1
-
Medium 6.5
libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid lin…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2020-27545.html