CVE-2016-8679

🗓️ 15 Feb 2017 21:00:59Reported by mitreType

The _dwarf_get_size_of_val function in libdwarf/dwarf_util.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file

Reporter	Title	Published	Views	Family All 13
UbuntuCve	CVE-2016-8679	15 Feb 201700:00	–	ubuntucve
Cvelist	CVE-2016-8679	15 Feb 201721:00	–	cvelist
Prion	Out-of-bounds	15 Feb 201721:59	–	prion
NVD	CVE-2016-8679	15 Feb 201721:59	–	nvd
Debian CVE	CVE-2016-8679	15 Feb 201721:59	–	debiancve
RedhatCVE	CVE-2016-8679	17 Oct 201614:17	–	redhatcve
OpenVAS	Huawei EulerOS: Security Advisory for libdwarf (EulerOS-SA-2020-1398)	16 Apr 202000:00	–	openvas
Tenable Nessus	FreeBSD : libdwarf -- multiple vulnerabilities (83041ca7-d690-11e6-9171-14dae9d210b8)	10 Jan 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : libdwarf (EulerOS-SA-2020-1398)	15 Apr 202000:00	–	nessus
Tenable Nessus	RHEL 7 : libdwarf (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus

Nvd

Node

libdwarf_project libdwarfRange1999-12-14–2016-11-24

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2016/10/16/3
blogs	www.blogs.gentoo.org/ago/2016/10/06/libdwarf-heap-based-buffer-overflow-in-_dwarf_get_size_of_val-dwarf_util-c/
securityfocus	www.securityfocus.com/bid/93601

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Feb 2017 21:59Current

6.0Medium risk

Vulners AI Score6.0

CVSS24.3

CVSS36.5

EPSS0.001

CWE-125