Skip to content
OpenAdvisories
Medium · 5.5 CVE-2022-38307 EUVD-2022-0139GHSA-x2xx-jw5m-5j86PYSEC-2022-275

LIEF contains segmentation violation

Published Sep 13, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS lief No fix yet —
Ubuntu 20.04 LTS lief No fix yet —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI lief < 0.12.1 0.12.1 GHSA-x2xx-jw5m-5j86

References