CVE-2024-2002

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.
Configurations

No configuration.

History

21 Nov 2024, 09:08

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGPVLSPIXR32J6FOAFTTIMYTUUXJICGW/ -
References () https://access.redhat.com/security/cve/CVE-2024-2002 - () https://access.redhat.com/security/cve/CVE-2024-2002 -
References () https://bugzilla.redhat.com/show_bug.cgi?id=2267700 - () https://bugzilla.redhat.com/show_bug.cgi?id=2267700 -
References () https://github.com/davea42/libdwarf-code/blob/main/bugxml/data.txt - () https://github.com/davea42/libdwarf-code/blob/main/bugxml/data.txt -

28 Sep 2024, 03:15

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGPVLSPIXR32J6FOAFTTIMYTUUXJICGW/', 'source': 'secalert@redhat.com'}

19 Apr 2024, 23:15

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad de doble liberación en libdwarf. En un objeto DWARF multicorrupto, libdwarf puede intentar desasignar (liberar) una asignación dos veces, lo que podría provocar resultados diversos e impredecibles.
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGPVLSPIXR32J6FOAFTTIMYTUUXJICGW/ -

18 Mar 2024, 13:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-18 13:15

Updated : 2024-11-21 09:08


NVD link : CVE-2024-2002

Mitre link : CVE-2024-2002

CVE.ORG link : CVE-2024-2002


JSON object : View

Products Affected

No product.

CWE
CWE-415

Double Free