Summary
It was discovered that dwarves incorrectly handled certain memory
operations under certain circumstances. An attacker could possibly use this
issue to cause dwarves to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2022-3534, CVE-2022-3606)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | dwarves-dfsg | 1.21-0ubuntu1~20.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | dwarves-dfsg | 1.21-0ubuntu1~18.04.1+esm1 |
Vulnerabilities 2
-
Medium 5.5
Linux Kernel libbpf btf_dump.c btf_dump_name_dups use after free
A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. Upgrading to ve…
-
Low 3.5
Linux Kernel BPF libbpf.c find_prog_by_sec_insn null pointer dereference
A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by_sec_insn of the file tools/lib/bpf/libbpf.c of the component BPF. The manipulation leads to null pointer dereference. It is recommended to…