839 matches found
CVE-2016-9480
CVE-2016-9480 affects libdwarf, specifically the dwarf_util.c path, where a heap-based over-read vulnerability in a malformed DWARF file can lead to information disclosure or a denial of service. The issue is described as a Heap Buffer Over-read (DW201611-006) and is referenced in upstream adviso...
CVE-2016-9480
libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarfutil.c component, aka DW201611-006...
libdwarf Integer Overflow Vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. An integer overflow vulnerability exists in libdwarf that stems from the program failing to adequately copy user-supplied data into a buffer. An attacker could use this vulnerability to execute arbitrary code in the...
CVE-2016-9480: Improper Restriction of Operations within the Bounds of a Memory Buffer
libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarfutil.c component, aka DW201611-006...
PT-2016-7765
Name of the Vulnerable Software and Affected Versions libdwarf version 2016-10-21 Description The issue allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affectin...
CVE-2016-9558
1 libdwarf/dwarfleb.c and 2 dwarfdump/printframes.c in libdwarf before 20161124 allow remote attackers to have unspecified impact via a crafted bit pattern in a signed leb number, aka a "negation overflow."...
libdwarf heap buffer overflow vulnerability (CNVD-2016-11348)
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in libdwarf. An attacker could exploit this vulnerability to execute arbitrary code in the context of an application...
libdwarf heap buffer overflow vulnerability (CNVD-2016-11349)
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in libdwarf. An attacker could exploit this vulnerability to execute arbitrary code in the context of an application...
Fedora 25 : libdwarf (2016-9b8717537a)
Update to 20161001 upstream release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
CVE-2016-9275
Heap-based buffer overflow in the dwarfskimforms function in libdwarf/dwarfmacro5.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service out-of-bounds read...
CVE-2016-9276
The dwarfgetarangeslist function in dwarfarrange.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service out-of-bounds read...
Fedora Update for libdwarf FEDORA-2016-328754be1c
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libdwarf 'dwarf_util.c' heap buffer overflow vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in libdwarf 20161001 and earlier versions. The vulnerability stems from the program failing to perform proper boundary checks on user-submitted input. An attacker could...
libdwarf heap buffer overflow vulnerability (CNVD-2016-10037)
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in libdwarf 20161001 and earlier versions. The vulnerability stems from the program failing to perform proper bounds checking on user-submitted input. An attacker could...
CVE-2016-8679
The dwarfgetsizeofval function in libdwarf/dwarfutil.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service out-of-bounds read by calling the dwarfdump command on a crafted file...
CVE-2016-8680
The dwarfgetabbrevforcode function in dwarfutil.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service out-of-bounds read by calling the dwarfdump command on a crafted file...
Fedora 24 : libdwarf (2016-328754be1c)
Update to 20160929 upstream release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
[SECURITY] Fedora 24 Update: libdwarf-20160929-1.fc24
Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see http://www.dwarfstd.org for DWARF specification...
[SECURITY] Fedora 25 Update: libdwarf-20161001-1.fc25
Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see http://www.dwarfstd.org for DWARF specification...