@@ -314,7 +314,7 @@ endrec: DW202111-001
314314
315315
316316id: DW202010-003
317- cve: CVE-202 -28163
317+ cve: CVE-2020 -28163
318318datereported: 2020-10-27
319319reportedby: Casper Sun
320320vulnerability: Passing null to %s due to corrupt line table header.
@@ -327,6 +327,12 @@ description: If a DWARF5 line table header has an invalid
327327 we provide a fixed string of <no file name>
328328 and for the form code we print the value and <unknown form>
329329 so there are no unpredictable effects.
330+ <pre>
331+
332+ This should be visible after redhat makes it public.
333+ Filed on bugzilla.redhat 23 November 2021.
334+ bugzilla.redhat.com/show_bug.cgi?id=2026000
335+ </pre>
330336datefixed: 2020-10-28
331337references: regressiontests/c-sun2/nullpointer
332338gitfixid: faf99408e3f9f706fc3809dd400e831f989778d3
@@ -338,7 +344,7 @@ id: DW202010-002
338344cve: CVE-2020-28162
339345datereported: 2020-10-27
340346reportedby: Casper Sun
341- vulnerability: A very deep DIE tree can corrupt random data.
347+ vulnerability: dwarfdump crashes if the nest of C scopes is too deep
342348product: dwarfdump
343349description: An object file where the DIEs depth of
344350 nesting exceeds the limit of 800 levels
@@ -353,6 +359,11 @@ description: An object file where the DIEs depth of
353359 is detected resulting in a normal error return.
354360 Additional places where this could occur were
355361 identified and the proper test added.
362+ <pre>
363+ Unable to enter in bugzilla.redhat.com
364+ so CVE can be completed by Fedora (as CNA)
365+ as dwarfdump is not part of Fedora
366+ </pre>
356367datefixed: 2020-10-28
357368references: regressiontests/c-sun2/globaloverflow
358369gitfixid: a7fa8edd640b74daf8e7a442dcec96640875b4fb
0 commit comments