CVE-2024-2002

Summary

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.

Affected Software

Weaknesses

• CWE-415: Double Free

Workarounds

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

ADP Enrichment

CVE Program Container

Additional References

• https://access.redhat.com/security/cve/CVE-2024-2002
• https://bugzilla.redhat.com/show_bug.cgi?id=2267700
• https://github.com/davea42/libdwarf-code/blob/main/bugxml/data.txt
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGPVLSPIXR32J6FOAFTTIMYTUUXJICGW/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://access.redhat.com/security/cve/CVE-2024-2002
• https://bugzilla.redhat.com/show_bug.cgi?id=2267700
• https://github.com/davea42/libdwarf-code/blob/main/bugxml/data.txt

• ←Previous
• Next→