659 matches found
Debian DLA-669-1 : dwarfutils security update
Several vulnerabilities were discovered in dwarfutils, a tool and library for reading/consuming and writing/producing DWARF debugging information. The Common Vulnerabilities and Exposures project identifies the following issues : CVE-2015-8538 A specially crafted ELF file can cause a segmentation...
[SECURITY] Fedora 25 Update: libdwarf-20161001-1.fc25
Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see http://www.dwarfstd.org for DWARF specification...
DLA-635-1 dwarfutils - security update
Bulletin has no description...
OracleVM 3.2 : rpm (OVMSA-2016-0077)
The remote OracleVM system is missing necessary patches to address critical security updates : - Add missing files in /usr/share/doc/ - Fix warning when applying the patch for 1163057 - Fix race condidition where unchecked data is exposed in the file system CVE-2013-64351163057 - Fix segfault on...
CVE-2016-5042
The dwarfgetarangeslist function in libdwarf before 20160923 allows remote attackers to cause a denial of service infinite loop and crash via a crafted DWARF section...
CVE-2016-5043
The dwarfdealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted DWARF section...
CVE-2016-5044
The WRITEUNALIGNED function in dwarfelfaccess.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds write and crash via a crafted DWARF section...
CVE-2016-5029
The createfullestfilepath function in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted dwarf file...
libdwarf 'dwarf_get_aranges_list()' function denial of service vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the 'dwarfgetarangeslist' function of libdwarf. An attacker can exploit this vulnerability to cause a denial of service infinite loop...
libdwarf '_dwarf_load_section' function denial of service vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the 'dwarfloadsection' function of libdwarf. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference...
libdwarf dwarf_line_table_reader.c File Denial of Service Vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the 'dwarfreadlinetableheader' function in the libdwarflinetablereader.c file. An attacker can exploit this vulnerability to cause a denial of service OOB read...
libdwarf dwarf_elf_access.c File Denial of Service Vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the libdwarfelfaccess.c file of libdwarf. An attacker can exploit this vulnerability to cause a denial of service OOB write...
libdwarf 'dwarf_get_macro_startend_file()' function denial of service vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the 'dwarfgetmacrostartendfile' function of libdwarf. An attacker can exploit this vulnerability to cause a denial of service OOB read...
libdwarf 'dwarf_dealloc()' function denial of service vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the 'dwarfdealloc' function of libdwarf, which stems from the program failing to check the 'DwarfPtr' space parameter. An attacker could use this vulnerability to cause a denial of...
[SECURITY] Fedora 24 Update: libdwarf-20160507-1.fc24
Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see http://www.dwarfstd.org for DWARF specification...
libunwind: denial of service
CVE-2015-3239 Unspecified Impact: Off-by-one error in the dwarftounwregnum function in include/dwarfi.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes...
libunwind: off-by-one in dwarf_to_unw_regnum()
An off-by-one array indexing error was found in the libunwind API, which could cause an error when reading untrusted binaries or dwarf debug info data. Red Hat products do not call the API in this way; and it is unlikely that any exploitable attack vector exists in current builds or supported usa...
libunwind: off-by-one in dwarf_to_unw_regnum()
An off-by-one array indexing error was found in the libunwind API, which could cause an error when reading untrusted binaries or dwarf debug info data. Red Hat products do not call the API in this way; and it is unlikely that any exploitable attack vector exists in current builds or supported usa...
Amazon Linux: Security Advisory (ALAS-2012-54)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...