oss-sec mailing list archives

CVE request - a out of bound read bug is found in libdwarf

From: xiaoqixue_1 <xiaoqixue_1 () 163 com>
Date: Thu, 10 Dec 2015 09:13:38 +0800 (CST)



Sorry for the wrong title in last mail.


a out of bound read bug is found in   latest release version dwarf-20151114 by Xiao Qixue and Liuyue.
 and we have tested the other version dwarf-20140805 which is also affected.


Red Hat Bugzilla:
https://bugzilla.redhat.com/show_bug.cgi?id=1289385


Upstream patch applied in libdwarf-20151114-2.fc24 build.

Current thread:

CVE request - Linux kernel - Fix handling of stored error in a negatively instantiated user key Wade Mealing (Dec 08)
- CVE request - Linux kernel - Fix handling of stored error in a negatively instantiated user key xiaoqixue_1 (Dec 09)
  - CVE request - a out of bound read bug is found in libdwarf xiaoqixue_1 (Dec 09)
    - Re: CVE request - a out of bound read bug is found in libdwarf cve-assign (Dec 09)
    - CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c) xiaoqixue_1 (Dec 10)
    - Re: CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c) Glenn Randers-Pehrson (Dec 10)
    - Re: CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c) Glenn Randers-Pehrson (Dec 17)
    - Re: CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c) cve-assign (Dec 11)
    - Re: Re: CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c) Glenn Randers-Pehrson (Dec 11)
- Re: CVE request - Linux kernel - Fix handling of stored error in a negatively instantiated user key cve-assign (Dec 09)