CVE:CVE-2022-39170
CNNVD:CNNVD-202209-085
libdwarf是一款用于读写DWARF2标准化调试数据格式的库和命令行工具。
libdwarf 0.4.1之前的版本存在安全漏洞，该漏洞源于其dwarf_frame.c组件的_dwarf_exec_frame_instr存在双重释放。
solution:Upgrade libdwarf_project libdwarf to a higher version than 0.4.1,and avoid the version 0.4.1; Upgrade fedoraproject fedora to a higher version than 37,and avoid the version 37