CVE catalog

CVE-2022-32200

dwarfutils vulnerabilities

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.98% · Oct 25, 2026

libdwarf 0.4.0 has a heap-based buffer over-read in _dwarf_check_string_valid in dwarf_util.c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandwarfutilssid1:0.11.1-1fixed
Debiandwarfutilsforky1:0.11.1-1fixed
Debiandwarfutilstrixie1:0.11.1-1fixed
Debiandwarfutilsbookworm20210528-1vulnerable
UbuntudwarfutilsnobleNot reportedvulnerable
Ubuntudwarfutilsnoble20210528-1ubuntu0.24.04.1~esm1fixed
Ubuntudwarfdumpnoble20210528-1ubuntu0.24.04.1~esm1fixed
Ubuntulibdwarf-devnoble20210528-1ubuntu0.24.04.1~esm1fixed
Ubuntulibdwarf1noble20210528-1ubuntu0.24.04.1~esm1fixed
Ubuntudwarfutilspro20210528-1vulnerable
Ubuntudwarfutilspro20210528-1build1vulnerable
Ubuntudwarfutilspro20210528-1build2vulnerable
Ubuntudwarfutilspro20210528-1ubuntu0.24.04.1~esm1fixed
Ubuntudwarfutils16.0420120410-2vulnerable
Ubuntudwarfutils16.0420120410-2+deb7u2build0.16.04.1vulnerable
Ubuntudwarfutils18.0420170709-1vulnerable
Ubuntudwarfutils18.0420180129-1vulnerable
Ubuntudwarfutils20.0420180809-1vulnerable
Ubuntudwarfutils20.0420190529-1vulnerable
Ubuntudwarfutils20.0420191104-1vulnerable
Ubuntudwarfutils20.0420191104-1ubuntu1vulnerable
Ubuntudwarfutils20.0420200114-1vulnerable
Ubuntudwarfutilspro20210528-1vulnerable
Ubuntudwarfutilspro20210528-1build1vulnerable
Ubuntudwarfutilspro20210528-1build2vulnerable
Ubuntudwarfutilspro20210528-1ubuntu0.24.04.1~esm1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandwarfutilssourcesid1:0.11.1-1not yet assignedNot reported[1012515]
Debiandwarfutilssourceforky1:0.11.1-1not yet assignedNot reported[1012515]
Debiandwarfutilssourcetrixie1:0.11.1-1not yet assignedNot reported[1012515]
Debiandwarfutilssourcebookworm(unfixed)not yet assignedNot reported[1012515]
Ubuntudwarfutilsdebnoble20210528-1ubuntu0.24.04.1~esm1Not reportedNot reportedNot reported
Ubuntudwarfdumpdebnoble20210528-1ubuntu0.24.04.1~esm1Not reportedNot reportedNot reported
Ubuntulibdwarf-devdebnoble20210528-1ubuntu0.24.04.1~esm1Not reportedNot reportedNot reported
Ubuntulibdwarf1debnoble20210528-1ubuntu0.24.04.1~esm1Not reportedNot reportedNot reported
Ubuntudwarfutilsdebpro20210528-1ubuntu0.24.04.1~esm1Not reportedUSN-7576-1Not reported
Ubuntudwarfutilsdebpro20210528-1ubuntu0.24.04.1~esm1Not reportedUBUNTU-CVE-2022-32200Not reported

[Debian bug #1012515]

Notes

[bookworm] dwarfutils: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [dwarfdump]Affected

    Source package: [dwarfutils]

    Details (2)

    • 20210528-1+b1 · amd64 · bookworm

      Affected

      usn · dwarfutils · debian · bookworm

    • 20210528-1+b1 · arm64 · bookworm

      Affected

      usn · dwarfutils · debian · bookworm

  • [libdwarf1]Affected

    Source package: [dwarfutils]

    Details (2)

    • 20210528-1+b1 · amd64 · bookworm

      Affected

      usn · dwarfutils · debian · bookworm

    • 20210528-1+b1 · arm64 · bookworm

      Affected

      usn · dwarfutils · debian · bookworm

  • [libdwarf-dev]Affected

    Source package: [dwarfutils]

    Details (2)

    • 20210528-1+b1 · amd64 · bookworm

      Affected

      usn · dwarfutils · debian · bookworm

    • 20210528-1+b1 · arm64 · bookworm

      Affected

      usn · dwarfutils · debian · bookworm

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]