Vulnerability in Libunwind Project
CVE-2015-3239
Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.
EPSS: 0.005 (39.8th percentile) — read the EPSS interpretation.
Affected products
- Libunwind_project Libunwind — versions 1.1
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Exploit)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2015-3239?
- CVE-2015-3239 is a vulnerability in Libunwind Project, classified under CWE-189. Published 2015-08-26.
- Is CVE-2015-3239 known to be exploited?
- 5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.