CVE-2020-28163 PUBLISHED

libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.

EPSS 0.12% · 30.8th percentile

Risk Scores

EPSS Score
0.12%
30.8th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSdwarfutils20200114-1, 0, 20180809-1
Ubuntu:18.04:LTSdwarfutils0, 20170709-1, 20180129-1
Ubuntu:16.04:LTSdwarfutils0, 20120410-2, 20120410-2+deb7u2build0.16.04.1

Timeline

References

Open in Interactive Console →