CVE-2016-5043

The dwarfdealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted DWARF section...

CVE-2016-5039

CVE-2016-5039 affects the libdwarf library: the get_attr_value function before 20160923 can be triggered by a crafted object with all-bits on to cause a denial of service via an out-of-bounds read. The description in the Initial document states this exact effect; the connected documents list mult...

CVE-2016-5029

The createfullestfilepath function in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted dwarf file...

CVE-2016-5042

The dwarfgetarangeslist function in libdwarf before 20160923 allows remote attackers to cause a denial of service infinite loop and crash via a crafted DWARF section...

CVE-2016-5033

The printexprloccontent function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

CVE-2016-5029

CVE-2016-5029 affects libdwarf prior to 2016-09-23. A crafted DWARF file can trigger a denial of service via a NULL pointer dereference in create_fullest_file_path. Documented in multiple sources (NVD, OSV, OSV-UBUNTU, EulerOS notes) with the same root cause. Exploitation details are not elaborat...

CVE-2016-5044

The WRITEUNALIGNED function in dwarfelfaccess.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds write and crash via a crafted DWARF section...

CVE-2016-5036

CVE-2016-5036 affects libdwarf (dump_block in print_sections.c) and is exploitable remotely via crafted frame data to trigger an out-of-bounds read, causing denial of service. The vulnerability is tied to libdwarf versions before 2016-09-23 (the fix/version after this date is not specified in the...

CVE-2016-5039

The getattrvalue function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted object with all-bits on...

CVE-2016-5035

CVE-2016-5035 describes a vulnerability in libdwarf: the function _dwarf_read_line_table_header in dwarf_line_table_reader.c is vulnerable in versions before 20160923. A crafted file can trigger an out-of-bounds read, allowing remote attackers to cause a denial of service. The issue is documented...

CVE-2016-5037

The dwarfloadsection function in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2016-5030

The dwarfcalculateinfosectionendptr function in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2016-5028

The printframeinstbytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via an object file with empty bss-like sections...

CVE-2016-7511

CVE-2016-7511 describes an integer overflow in the dwarf_die_deliv.c of libdwarf 20160613 that can be triggered by a crafted file, allowing remote attackers to cause a denial of service (crash). The vulnerability is tied to the libdwarf project and specifically its handling of DWARF delivery in d...

CVE-2016-5043

CVE-2016-5043 affects libdwarf’s dwarf_dealloc function. A crafted DWARF section can cause an out-of-bounds read, resulting in a denial of service (crash). Public sources consistently indicate the vulnerability exists in libdwarf pre-20160923; remediation is to use a patched libdwarf (20160923 or...

CVE-2016-7510

The readlinetableprogram function in dwarflinetablereadercommon.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via crafted input...

CVE-2016-7511

Integer overflow in the dwarfdiedeliv.c in libdwarf 20160613 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2016-5037

The dwarfloadsection function in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2016-5032

The dwarfgetxuhashentry function in libdwarf before 20160923 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2016-5038

CVE-2016-5038 affects libdwarf; the vulnerable component is the function dwarf_get_macro_startend_file in dwarf_macro5.c, with versions before 20160923. The issue arises from an out-of-bounds read triggered by a crafted string offset in .debug_str, enabling a remote attacker to cause a denial of ...