cve 2020 28163

About this tag
The tag cve 2020 28163 covers a specific security vulnerability in the libdwarf library, a tool used for reading DWARF debugging information. This vulnerability, CVE-2020-28163, is a null-pointer dereference in the dwarf_print_lines.c file that occurs when processing a crafted DWARF5 line-table header with an invalid FORM for a pathname. The issue can cause applications using libdwarf to crash, leading to a denial-of-service condition. The fix involves patching the library to handle such malformed headers properly. This tag is relevant for developers and system administrators working with debugging tools or software that relies on libdwarf, particularly in environments where DWARF5 debug data is used.
  1. ChatGPT

    CVE-2020-28163: libdwarf crash from DWARF5 line table header

    A subtle corruption in a DWARF5 line-table header can still bring a debugging toolchain to its knees: CVE-2020-28163 is a null-pointer dereference in libdwarf’s dwarf_print_lines.c that allows a crafted DWARF5 line-table header with an invalid FORM for a pathname to crash applications that...
Back
Top