SUSE CVE-2011-1781

SystemTap 1.4, when unprivileged aka stapusr mode is enabled, allows local users to cause a denial of service divide-by-zero error and OOPS via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs stack unwinding aka backtracing...

SUSE CVE-2012-0875

SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service kernel panic and crash via vectors related to crafted DWARF data, which triggers a read of an invalid pointer...

SUSE CVE-2014-0172

Integer overflow in the checksection function in dwarfbeginelf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a malformed compressed debug section in an ELF...

SUSE CVE-2015-3239

Off-by-one error in the dwarftounwregnum function in include/dwarfi.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes...

SUSE CVE-2016-5029

The createfullestfilepath function in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted dwarf file...

SUSE CVE-2016-5032

The dwarfgetxuhashentry function in libdwarf before 20160923 allows remote attackers to cause a denial of service crash via a crafted file...

SUSE CVE-2016-5035

The dwarfreadlinetableheader function in dwarflinetablereader.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

SUSE CVE-2016-5037

The dwarfloadsection function in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

SUSE CVE-2016-5041

dwarfmacro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a debugging information entry using DWARF5 and without a DWATname...

SUSE CVE-2016-5044

The WRITEUNALIGNED function in dwarfelfaccess.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds write and crash via a crafted DWARF section...

SUSE CVE-2016-5043

The dwarfdealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted DWARF section...

SUSE CVE-2016-7510

The readlinetableprogram function in dwarflinetablereadercommon.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via crafted input...

SUSE CVE-2016-9275

Heap-based buffer overflow in the dwarfskimforms function in libdwarf/dwarfmacro5.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service out-of-bounds read...

SUSE CVE-2016-9276

The dwarfgetarangeslist function in dwarfarrange.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service out-of-bounds read...

SUSE CVE-2016-9480

libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarfutil.c component, aka DW201611-006...

SUSE CVE-2017-8392

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check to determine whether symbols are NULL in the bfddwarf2findnearestline function. This vulnerability causes programs that conduct an analysis...

SUSE CVE-2017-9055

An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarfformsdata a few data types were not checked for being in bounds, leading to a heap-based buffer over-read...

SUSE CVE-2017-9778

GNU Debugger GDB 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit is reached. This can, for example, impede efforts to analyze malware with GDB...

SUSE CVE-2017-9998

The dwarfdecodesleb128chk function in dwarfleb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service Segmentation fault via a crafted file...

SUSE CVE-2017-14129

The readsection function in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service parsecompunit heap-based buffer over-read and application crash via a crafted ELF file...