CVE catalog

CVE-2014-9482

dwarfutils: CVE-2014-9482

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
2.23% · Oct 25, 2026

Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow remote attackers to cause a denial of service (program crash) via a crafted ELF file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandwarfutilssid1:0.11.1-1not affected
Debiandwarfutilsforky1:0.11.1-1not affected
Debiandwarfutilstrixie1:0.11.1-1not affected
Debiandwarfutilsbookworm20210528-1not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebiandwarfutilssourcesidNot affectedunimportantNot reportedNot reported
DebiandwarfutilssourceforkyNot affectedunimportantNot reportedNot reported
DebiandwarfutilssourcetrixieNot affectedunimportantNot reportedNot reported
DebiandwarfutilssourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [dwarfdump]Not affected

    Source package: [dwarfutils]

    Details (2)
    • 20210528-1+b1 · amd64 · bookworm

      Not affected

      dsa · dwarfutils · debian · bookworm

    • 20210528-1+b1 · arm64 · bookworm

      Not affected

      dsa · dwarfutils · debian · bookworm

  • [libdwarf1]Not affected

    Source package: [dwarfutils]

    Details (2)
    • 20210528-1+b1 · amd64 · bookworm

      Not affected

      dsa · dwarfutils · debian · bookworm

    • 20210528-1+b1 · arm64 · bookworm

      Not affected

      dsa · dwarfutils · debian · bookworm

  • [libdwarf-dev]Not affected

    Source package: [dwarfutils]

    Details (2)
    • 20210528-1+b1 · amd64 · bookworm

      Not affected

      dsa · dwarfutils · debian · bookworm

    • 20210528-1+b1 · arm64 · bookworm

      Not affected

      dsa · dwarfutils · debian · bookworm

Observed:

References