{"id":"CVE-2015-3239","aliases":["DEBIAN-CVE-2015-3239","DLA-271-1","EUVD-2015-3295","GHSA-5mwh-64pf-674p","MGASA-2015-0307","RHSA-2015:1675","RHSA-2015:1768","RHSA-2015:1769","SUSE-SU-2019:0284-1","UBUNTU-CVE-2015-3239","openSUSE-SU-2024:10288-1"],"status":"published","title":"Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows...","description":"Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.","severity":{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00498,"percentile":0.42941,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-189"],"published":"2015-07-12T00:00:00Z","modified":"2026-10-17T12:52:52Z","exploits":[{"source":"pocgithub","id":"RenukaSelvar/libunwind_CVE-2015-3239","title":"RenukaSelvar/libunwind_CVE-2015-3239","date":"2024-11-04","url":"https://github.com/RenukaSelvar/libunwind_CVE-2015-3239"},{"source":"pocgithub","id":"RenukaSelvar/libunwind_CVE-2015-3239_After","title":"RenukaSelvar/libunwind_CVE-2015-3239_After","date":"2024-11-04","url":"https://github.com/RenukaSelvar/libunwind_CVE-2015-3239_After"},{"source":"pocgithub","id":"RenukaSelvar/libunwind_CVE-2015-3239_AfterPatch","title":"RenukaSelvar/libunwind_CVE-2015-3239_AfterPatch","date":"2024-11-04","url":"https://github.com/RenukaSelvar/libunwind_CVE-2015-3239_AfterPatch"}],"fixes":[{"ecosystem":"Debian:12","package":"android-platform-external-libunwind","fixed_in":["7.0.0+r1-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"android-platform-external-libunwind","fixed_in":["7.0.0+r1-4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libunwind","fixed_in":["1.1-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libunwind","fixed_in":["1.1-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libunwind","fixed_in":["1.1-4"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"libunwind","fixed_in":["0.99-0.2+deb6u1"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"libunwind","fixed_in":["1.1-2.1.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"libunwind","fixed_in":["1.1-4.1.mga5"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"libunwind","fixed_in":["0:1.1-4.1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"libunwind-debuginfo","fixed_in":["0:1.1-4.1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el6","package":"libunwind","fixed_in":["0:1.1-4.1.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el6","package":"libunwind-debuginfo","fixed_in":["0:1.1-4.1.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"libunwind","fixed_in":["0:1.1-4.1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"libunwind-debuginfo","fixed_in":["0:1.1-4.1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"libunwind-devel","fixed_in":["0:1.1-4.1.el7ost"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libunwind","fixed_in":["1.1-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libunwind","fixed_in":["1.1-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libunwind","fixed_in":["1.1-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libunwind","fixed_in":["1.1-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"libunwind","fixed_in":["1.1-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libunwind","fixed_in":["1.1-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libunwind","fixed_in":["1.1-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libunwind","fixed_in":["1.1-11.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libunwind","fixed_in":["1.2~rc1-2.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"android-platform-external-libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0+r1-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"android-platform-external-libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0+r1-4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-4"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99-0.2+deb6u1"}]}],"versions":["0.99-0.2"]},{"source":"osv","ecosystem":"Mageia:4","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-2.1.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-4.1.mga5"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-4.1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"libunwind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-4.1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-4.1.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"libunwind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-4.1.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-4.1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"libunwind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-4.1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"libunwind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-4.1.el7ost"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-11.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"android-platform-external-libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.1+r8-1","6.0.0+r26-3","6.0.1+r16-1","6.0.1+r16-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"racket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2-2","6.2-3","6.3-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"racket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.9-2","6.11+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"racket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.2+dfsg1-2ubuntu2","7.2+dfsg1-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"racket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.9+dfsg1-2build1","8.2+dfsg1-2","8.2+dfsg1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"racket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.7+dfsg1-1","8.10+dfsg1-2","8.10+dfsg1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"racket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.12+dfsg1-7ubuntu1","8.16+dfsg1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"racket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.18+dfsg1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"racket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.16+dfsg1-3ubuntu2","8.18+dfsg1-1ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1-2.3"}]}]}],"products":[{"vendor":"libunwind_project","product":"libunwind"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2015-1675.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1769.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1232265","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence","report"]},{"url":"http://git.savannah.gnu.org/cgit/libunwind.git/commit/?id=396b6c7ab737e2bff244d640601c436a26260ca1","tags":["x_refsource_CONFIRM","x_transferred","web","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1768.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/76707","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3239","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1675","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1768","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1769","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3239","tags":["report"]},{"url":"https://github.com/advisories/GHSA-5mwh-64pf-674p"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-3239","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0307.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16375","tags":["report"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2015-July/162200.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1675.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3239","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1768.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1769.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190284-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1122012","tags":["report"]},{"url":"https://bugzilla.suse.com/936786","tags":["report"]},{"url":"https://bugzilla.suse.com/976955","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3239","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-3239","tags":["report"]},{"url":"http://savannah.nongnu.org/bugs/?45276","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-3239","description":"Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.","status":"published","published":"2015-08-26T19:00:00Z","modified":"2024-08-06T05:39:32.093Z","updated_at":"2026-11-02T14:35:42.680858Z"}],"euvd":[{"id":"EUVD-2015-3295","description":"Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.","status":"published","published":"2015-08-26T19:00:00Z","modified":"2024-08-06T05:39:32Z","updated_at":"2026-11-03T02:22:08.642556Z"}],"ghsa":[{"id":"GHSA-5mwh-64pf-674p","title":"Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows...","description":"Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.","status":"published","published":"2022-05-17T03:20:28Z","modified":"2023-02-02T21:33:59Z","updated_at":"2026-11-02T14:52:47.451891Z"}],"nvd":[{"id":"CVE-2015-3239","description":"Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.","status":"published","published":"2015-08-26T19:59:04.393Z","modified":"2026-06-17T00:25:36.083Z","cvss":[{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:03:08.998581Z"}],"osv":[{"id":"CVE-2015-3239","description":"Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.","status":"published","published":"2015-08-26T19:59:04Z","modified":"2026-04-16T06:22:08.881253679Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-3239","description":"Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.","status":"published","published":"2015-08-26T19:59:04.393Z","modified":"2026-09-09T06:47:27.39522629Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"DLA-271-1","title":"libunwind - security update","status":"published","published":"2015-07-12T00:00:00Z","modified":"2026-03-09T01:21:13.022064Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2015-0307","title":"Updated libunwind package fixes security vulnerability","description":"An invalid DW_OP_bregXX opcodes can access dwarf_to_unw_regnum_map one\nitem past the end (CVE-2015-3239).\n","status":"published","published":"2015-08-10T14:31:41Z","modified":"2026-04-16T06:26:19.952719665Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10288-1","title":"libunwind-1.2~rc1-2.3 on GA media","description":"These are all security issues fixed in the libunwind-1.2~rc1-2.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:53:16.285571Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2015:1675","title":"Red Hat Security Advisory: libunwind security update","status":"published","published":"2024-09-15T22:48:22Z","modified":"2025-11-22T11:03:19Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1768","title":"Red Hat Security Advisory: libunwind security update","status":"published","published":"2024-09-15T22:48:26Z","modified":"2025-11-22T11:03:46Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1769","title":"Red Hat Security Advisory: libunwind security update","status":"published","published":"2024-09-15T22:48:31Z","modified":"2025-11-22T11:03:47Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2019:0284-1","title":"Security update for libunwind","description":"This update for libunwind fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2015-3239: Fixed a off-by-one in the dwarf_to_unw_regnum function (bsc#936786)\n\nNon-security issues fixed:\n\n- Fixed a dependency issue with libzmq5 (bsc#1122012)\n- Fixed build on armv7 (bsc#976955)\n","status":"published","published":"2019-02-07T12:24:06Z","modified":"2026-02-04T03:12:49.973598Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"UBUNTU-CVE-2015-3239","description":"Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.","status":"published","published":"2015-08-26T19:59:00Z","modified":"2026-10-17T12:52:52.021606794Z","updated_at":"2026-11-02T15:54:10.045446Z"}]}}