oss-sec mailing list archives

Re: CVE request -libdwarf 20160613 heap-buffer-overflow


From: Agostino Sarubbo <ago () gentoo org>
Date: Thu, 15 Sep 2016 18:05:41 +0200

On Wednesday 14 September 2016 00:22:43 vul@724safe, 
vul () 724safe com wrote:
Hello,

A heap-buffer-overflow was found in the latest libdward 
20160613  version.

I forwarded this bug to upstream which was NOT aware of this 
problem.

I guess that drop an e-mail to upstream before the 
announcement does not cost much.
Thanks.

Agostino

Current thread: