[Git][security-tracker-team/security-tracker][master] Add several new issues for libelfin

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
76d8cee5 by Salvatore Bonaccorso at 2021-08-06T07:21:29+02:00
Add several new issues for libelfin

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -62865,19 +62865,33 @@ CVE-2020-24829 (An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Bo
 CVE-2020-24828
 	RESERVED
 CVE-2020-24827 (A vulnerability in the dwarf::cursor::skip_form function of Libelfin v ...)
-	TODO: check
+	- libelfin <unfixed>
+	NOTE: https://github.com/aclements/libelfin/issues/47
+	NOTE: https://github.com/xiaoxiongwang/function_bugs/tree/master/libelfin#segv-in-function-dwarfcursorskip_form-at-dwarfcursorcc181
 CVE-2020-24826 (A vulnerability in the elf::section::as_strtab function of Libelfin v0 ...)
-	TODO: check
+	- libelfin <unfixed>
+	NOTE: https://github.com/aclements/libelfin/issues/49
+	NOTE: https://github.com/xiaoxiongwang/function_bugs/tree/master/libelfin#segv-in-function-elfsectionas_strtab-at-elfelfcc284
 CVE-2020-24825 (A vulnerability in the line_table::line_table function of Libelfin v0. ...)
-	TODO: check
+	- libelfin <unfixed>
+	NOTE: https://github.com/aclements/libelfin/issues/46
+	NOTE: https://github.com/xiaoxiongwang/function_bugs/tree/master/libelfin#segv-in-function-line_tableline_table-at-dwarflinecc104
 CVE-2020-24824 (A global buffer overflow issue in the dwarf::line_table::line_table fu ...)
-	TODO: check
+	- libelfin <unfixed>
+	NOTE: https://github.com/aclements/libelfin/issues/48
+	NOTE: https://github.com/xiaoxiongwang/function_bugs/tree/master/libelfin#global-buffer-overflow-in-function-dwarfline_tableline_table-at-dwarflinecc107
 CVE-2020-24823 (A vulnerability in the dwarf::to_string function of Libelfin v0.3 allo ...)
-	TODO: check
+	- libelfin <unfixed>
+	NOTE: https://github.com/aclements/libelfin/issues/51
+	NOTE: https://github.com/xiaoxiongwang/function_bugs/tree/master/libelfin#segv-in-function-dwarfto_string-at-dwarfvaluecc300
 CVE-2020-24822 (A vulnerability in the dwarf::cursor::uleb function of Libelfin v0.3 a ...)
-	TODO: check
+	- libelfin <unfixed>
+	NOTE: https://github.com/aclements/libelfin/issues/50
+	NOTE: https://github.com/xiaoxiongwang/function_bugs/tree/master/libelfin#segv-in-function-dwarfcursoruleb128-at-dwarfinternalhh154
 CVE-2020-24821 (A vulnerability in the dwarf::cursor::skip_form function of Libelfin v ...)
-	TODO: check
+	- libelfin <unfixed>
+	NOTE: https://github.com/aclements/libelfin/issues/52
+	NOTE: https://github.com/xiaoxiongwang/function_bugs/tree/master/libelfin#segv-in-function-dwarfcursorskip_form-at-dwarfcursorcc191
 CVE-2020-24820
 	RESERVED
 CVE-2020-24819



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/76d8cee586ad7ff97239548835918a4e4e669b00

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/76d8cee586ad7ff97239548835918a4e4e669b00
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210806/f991777b/attachment-0001.htm>