{"timestamp":"2024-08-28T15:05:19.693453Z","id":"CVE-2024-2002","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"defaultStatus":"unaffected","collectionURL":"https://github.com/davea42/libdwarf-code/","packageName":"libdwarf","versions":[{"version":"0.1.0","status":"affected"},{"version":"0.9.2","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libdwarf","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libdwarf","cpes":["cpe:/o:redhat:enterprise_linux:8"]}]

OR
          *cpe:2.3:a:libdwarf_project:libdwarf:*:*:*:*:*:*:*:* versions from (including) 0.1.0 up to (excluding) 0.9.2

OR
          *cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*

OR
          *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

CVE: https://access.redhat.com/security/cve/CVE-2024-2002 Types: Third Party Advisory

CVE: https://bugzilla.redhat.com/show_bug.cgi?id=2267700 Types: Issue Tracking

CVE: https://github.com/davea42/libdwarf-code/blob/main/bugxml/data.txt Types: Third Party Advisory

CVE: https://lists.fedoraproject.org/archives/list/[email protected]/message/ZGPVLSPIXR32J6FOAFTTIMYTUUXJICGW/ Types: Mailing List

Red Hat, Inc.: https://access.redhat.com/security/cve/CVE-2024-2002 Types: Third Party Advisory

Red Hat, Inc.: https://bugzilla.redhat.com/show_bug.cgi?id=2267700 Types: Issue Tracking

Red Hat, Inc.: https://github.com/davea42/libdwarf-code/blob/main/bugxml/data.txt Types: Third Party Advisory

https://access.redhat.com/security/cve/CVE-2024-2002

https://bugzilla.redhat.com/show_bug.cgi?id=2267700

https://github.com/davea42/libdwarf-code/blob/main/bugxml/data.txt

https://lists.fedoraproject.org/archives/list/[email protected]/message/ZGPVLSPIXR32J6FOAFTTIMYTUUXJICGW/

Red Hat, Inc. https://lists.fedoraproject.org/archives/list/[email protected]/message/ZGPVLSPIXR32J6FOAFTTIMYTUUXJICGW/

Red Hat, Inc. https://lists.fedoraproject.org/archives/list/[email protected]/message/ZGPVLSPIXR32J6FOAFTTIMYTUUXJICGW/ [No types assigned]

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.

Red Hat, Inc. AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Red Hat, Inc. CWE-415

Red Hat, Inc. https://access.redhat.com/security/cve/CVE-2024-2002 [No types assigned]

Red Hat, Inc. https://bugzilla.redhat.com/show_bug.cgi?id=2267700 [No types assigned]

Red Hat, Inc. https://github.com/davea42/libdwarf-code/blob/main/bugxml/data.txt [No types assigned]