674 matches found
CVE-2016-5043
The dwarfdealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted DWARF section...
CVE-2016-5044
The WRITEUNALIGNED function in dwarfelfaccess.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds write and crash via a crafted DWARF section...
CVE-2016-5029
The createfullestfilepath function in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted dwarf file...
libdwarf 'dwarf_get_aranges_list()' function denial of service vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the 'dwarfgetarangeslist' function of libdwarf. An attacker can exploit this vulnerability to cause a denial of service infinite loop...
libdwarf '_dwarf_load_section' function denial of service vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the 'dwarfloadsection' function of libdwarf. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference...
libdwarf dwarf_line_table_reader.c File Denial of Service Vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the 'dwarfreadlinetableheader' function in the libdwarflinetablereader.c file. An attacker can exploit this vulnerability to cause a denial of service OOB read...
libdwarf dwarf_elf_access.c File Denial of Service Vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the libdwarfelfaccess.c file of libdwarf. An attacker can exploit this vulnerability to cause a denial of service OOB write...
libdwarf 'dwarf_get_macro_startend_file()' function denial of service vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the 'dwarfgetmacrostartendfile' function of libdwarf. An attacker can exploit this vulnerability to cause a denial of service OOB read...
libdwarf 'dwarf_dealloc()' function denial of service vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the 'dwarfdealloc' function of libdwarf, which stems from the program failing to check the 'DwarfPtr' space parameter. An attacker could use this vulnerability to cause a denial of...
[SECURITY] Fedora 24 Update: libdwarf-20160507-1.fc24
Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see http://www.dwarfstd.org for DWARF specification...
libunwind: denial of service
CVE-2015-3239 Unspecified Impact: Off-by-one error in the dwarftounwregnum function in include/dwarfi.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes...
libunwind: off-by-one in dwarf_to_unw_regnum()
An off-by-one array indexing error was found in the libunwind API, which could cause an error when reading untrusted binaries or dwarf debug info data. Red Hat products do not call the API in this way; and it is unlikely that any exploitable attack vector exists in current builds or supported usa...
libunwind: off-by-one in dwarf_to_unw_regnum()
An off-by-one array indexing error was found in the libunwind API, which could cause an error when reading untrusted binaries or dwarf debug info data. Red Hat products do not call the API in this way; and it is unlikely that any exploitable attack vector exists in current builds or supported usa...
Amazon Linux: Security Advisory (ALAS-2012-54)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-3239
Off-by-one error in the dwarftounwregnum function in include/dwarfi.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes...
DEBIAN-CVE-2015-3239
Off-by-one error in the dwarftounwregnum function in include/dwarfi.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes...
CVE-2015-3239
Off-by-one error in the dwarftounwregnum function in include/dwarfi.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes...
Code injection
Off-by-one error in the dwarftounwregnum function in include/dwarfi.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes...
CVE-2015-3239
Off-by-one error in the dwarftounwregnum function in include/dwarfi.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes...
CVE-2015-3239
CVE-2015-3239 affects libunwind 1.1 through multiple advisories, caused by an off-by-one error in dwarf_to_unw_regnum (include/dwarf_i.h). The issue can allow a local attacker to cause a denial of service or execute arbitrary code via invalid dwarf opcodes; IBM’s bulletin notes a heap-based overf...