Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.

This update for libunwind fixes the following issues :

Security issues fixed :

CVE-2015-3239: Fixed a off-by-one in the dwarf_to_unw_regnum function (bsc#936786)

Non-security issues fixed: Fixed a dependency issue with libzmq5 (bsc#1122012)

Fixed build on armv7 (bsc#976955)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libunwind fixes one minor security issue and one bug.

The following security issue was fixed :

  - CVE-2015-3239: off-by-one error that could be triggered     when reading untrusted binaries (boo#936786)

The following packaging bug was fixed :

  - boo#1122012: The 32 bit were not generated on Leap 42.3

An off-by-one array indexing error was found in the libunwind API, which could cause an error when reading untrusted binaries or dwarf debug info data.

Fix CVE-2015-3239

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

libunwind was updated to fix one security issue.

This security issue was fixed :

  - CVE-2015-3239: Off-by-one in dwarf_to_unw_regnum()     (bsc#936786).

Invalid dwarf opcodes can cause references beyond the end of the array.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
122048	SUSE SLED12 / SLES12 Security Update : libunwind (SUSE-SU-2019:0284-1)	Nessus	SuSE Local Security Checks	low
121286	openSUSE Security Update : libunwind (openSUSE-2019-61)	Nessus	SuSE Local Security Checks	low
86356	Amazon Linux AMI : libunwind (ALAS-2015-600)	Nessus	Amazon Linux Local Security Checks	low
85087	Fedora 21 : libunwind-1.1-10.fc21 (2015-11465)	Nessus	Fedora Local Security Checks	low
84904	Fedora 22 : libunwind-1.1-10.fc22 (2015-11354)	Nessus	Fedora Local Security Checks	low
84755	openSUSE Security Update : libunwind (openSUSE-2015-491)	Nessus	SuSE Local Security Checks	low
84677	Debian DLA-271-1 : libunwind security update	Nessus	Debian Local Security Checks	low

Detections

Analytics

CVE-2015-3239

critical

Tenable Plugins

low

low

low

low

low

low

low