839 matches found
CVE-2016-5032
The dwarfgetxuhashentry function in libdwarf before 20160923 allows remote attackers to cause a denial of service crash via a crafted file...
CVE-2016-5033
CVE-2016-5033 : The print_exprloc_content function in libdwarf before 20160923 allows a remote attacker to cause a denial of service via an out-of-bounds read when processing a crafted file. This is documented across multiple sources (NVD, OSV, and Nessus/NASL entries). The provided materials do ...
CVE-2016-5039
The getattrvalue function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted object with all-bits on...
CVE-2016-5037
CVE-2016-5037 affects libdwarf; the _dwarf_load_section function in libdwarf prior to 20160923 is vulnerable to remote exploitation via a crafted file, causing a denial of service through a NULL pointer dereference. Public docs provide CVSS scores (v2: 4.3; v3.1: 6.5) and confirm the vulnerabilit...
CVE-2016-5031
The printframeinstbytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
CVE-2016-5034
dwarfelfaccess.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds write via a crafted file, related to relocation records...
CVE-2016-7511
Integer overflow in the dwarfdiedeliv.c in libdwarf 20160613 allows remote attackers to cause a denial of service crash via a crafted file...
CVE-2016-5028
CVE-2016-5028 affects libdwarf (print_frame_inst_bytes) and is described as a denial of service via a NULL pointer dereference when processing an object file with empty bss-like sections, using libdwarf prior to 20160923. Connected documents confirm the vulnerability exists in libdwarf and list a...
CVE-2016-5032
CVE-2016-5032 : In libdwarf, the function dwarf_get_xu_hash_entry (pre-2016-09-23) is vulnerable to a denial-of-service crash when processing a crafted file. This is consistently reported across sources (OSV/NVD/NASL references). No public exploitation details or patched versions are provided in ...
CVE-2016-5036
The dumpblock function in printsections.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via crafted frame data...
CVE-2016-5042
CVE-2016-5042 affects libdwarf. The vulnerable component is the function dwarf_get_aranges_list in libdwarf, with the issue present in versions before 20160923. A remote attacker can cause a denial of service (infinite loop and crash) by crafting a DWARF section. The provided connected documents ...
CVE-2016-5040
CVE-2016-5040 affects libdwarf; versions prior to 20160923 are vulnerable. A large length value in a compilation unit header allows remote out-of-bounds reads, leading to a denial of service (crash). The issue is mitigated by upgrading libdwarf to the 20160923 release or applying the vendor patch...
CVE-2016-5040
libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read and crash via a large length value in a compilation unit header...
CVE-2016-5034
CVE-2016-5034 affects libdwarf (dwarf_elf_access.c) with an out-of-bounds write via a crafted ELF file, vulnerable in versions before 20160923. Remote denial of service is stated. Connected documents consistently describe this vulnerability as part of the libdwarf set of CVEs; no explicit patch v...
CVE-2016-5038
The dwarfgetmacrostartendfile function in dwarfmacro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted string offset for .debugstr...
CVE-2016-5031
The printframeinstbytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
CVE-2016-5036
The dumpblock function in printsections.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via crafted frame data...
CVE-2016-5040
libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read and crash via a large length value in a compilation unit header...