Lucene search
+L

753 matches found

CNVD
CNVD
•added 2017/05/22 12:00 a.m.•13 views

libdwarf heap buffer overflow vulnerability (CNVD-2017-07540)

libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in the 'dwarfformsdata' function in libdwarf version 2017-03-21. An attacker can exploit this vulnerability to cause a heap buffer out-of-bounds read...

9.8CVSS7.3AI score0.02581EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/05/22 12:00 a.m.•17 views

libdwarf heap buffer overflow vulnerability (CNVD-2017-07503)

libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in the 'dwarfformsdata' function in libdwarf version 2017-03-21. An attacker can exploit this vulnerability to cause a heap buffer out-of-bounds read...

9.8CVSS7.3AI score0.01743EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2017/05/18 6:29 a.m.•22 views

UBUNTU-CVE-2017-9055

An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarfformsdata a few data types were not checked for being in bounds, leading to a heap-based buffer over-read...

9.8CVSS6.9AI score0.01743EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2017/05/18 6:29 a.m.•24 views

DEBIAN-CVE-2017-9055

An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarfformsdata a few data types were not checked for being in bounds, leading to a heap-based buffer over-read...

9.8CVSS7.1AI score0.01743EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2017/05/18 6:29 a.m.•15 views

DEBIAN-CVE-2017-9052

An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarfformsdata is due to a failure to check a pointer for being in bounds in a few places in this function and a failure in a check in dwarfattrlist...

9.8CVSS7AI score0.02581EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2017/05/18 6:29 a.m.•15 views

CVE-2017-9052

An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarfformsdata is due to a failure to check a pointer for being in bounds in a few places in this function and a failure in a check in dwarfattrlist...

9.8CVSS6.8AI score0.02581EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/05/18 12:00 a.m.•9 views

PT-2017-18674

Name of the Vulnerable Software and Affected Versions libdwarf affected versions not specified Description A heap-based buffer over-read issue was discovered in the dwarf formsdata function due to unchecked data types, leading to an out-of-bounds access. Recommendations At the moment, there is no...

9.8CVSS0.01743EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2017/05/18 12:00 a.m.•4 views

PT-2017-18672

Name of the Vulnerable Software and Affected Versions libdwarf affected versions not specified Description A heap-based buffer over-read issue was discovered in the dwarf read loc expr op function due to a failure to check a pointer for being in bounds. Recommendations At the moment, there is no...

9.1CVSS0.01737EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2017/05/18 12:00 a.m.•4 views

PT-2017-18671

Name of the Vulnerable Software and Affected Versions libdwarf version 2017-03-21 Description A heap-based buffer over-read issue was discovered in the dwarf formsdata function due to a failure to check a pointer for being in bounds and a failure in a check in the dwarf attr list function...

9.8CVSS0.02581EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2017/05/18 12:00 a.m.•8 views

PT-2017-18673

Name of the Vulnerable Software and Affected Versions libdwarf version 2017-03-21 Description A heap-based buffer over-read issue was discovered in the dwarf decode s leb128 chk function, where a byte pointer was dereferenced before being checked for bounds, leading to the over-read...

9.8CVSS0.01743EPSS
SaveExploits0References9
Fedora
Fedora
•added 2017/04/30 12:22 a.m.•58 views

[SECURITY] Fedora 26 Update: libdwarf-20170416-1.fc26

Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see http://www.dwarfstd.org for DWARF specification...

9.1CVSS0.1AI score0.04224EPSS
SaveExploits0
Fedora
Fedora
•added 2017/04/25 5:56 p.m.•65 views

[SECURITY] Fedora 25 Update: libdwarf-20170416-1.fc25

Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see http://www.dwarfstd.org for DWARF specification...

9.1CVSS0.1AI score0.04224EPSS
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2017/04/10 4:59 p.m.•12 views

UBUNTU-CVE-2016-5041

dwarfmacro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a debugging information entry using DWARF5 and without a DWATname...

7.5CVSS7.2AI score0.03369EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2017/04/10 4:59 p.m.•12 views

DEBIAN-CVE-2016-5041

dwarfmacro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a debugging information entry using DWARF5 and without a DWATname...

7.5CVSS6.7AI score0.03369EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2017/03/23 6:59 p.m.•23 views

UBUNTU-CVE-2016-9276

The dwarfgetarangeslist function in dwarfarrange.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service out-of-bounds read...

7.5CVSS6.8AI score0.04055EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2017/03/23 6:59 p.m.•8 views

DEBIAN-CVE-2016-9275

Heap-based buffer overflow in the dwarfskimforms function in libdwarf/dwarfmacro5.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service out-of-bounds read...

7.5CVSS9.2AI score0.04224EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2017/03/23 12:00 a.m.•4 views

PT-2017-10038

Name of the Vulnerable Software and Affected Versions Libdwarf versions prior to 20161124 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, through the dwarf get aranges list function in dwarf arrange.c. Recommendations For versions...

7.5CVSS0.04055EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2017/03/23 12:00 a.m.•3 views

PT-2017-10037

Name of the Vulnerable Software and Affected Versions Libdwarf versions prior to 20161124 Description The issue is related to a heap-based buffer overflow in the dwarf skim forms function, which can cause a denial of service due to an out-of-bounds read. Recommendations For versions prior to...

7.5CVSS0.04224EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2017/02/28 12:00 a.m.•3 views

PT-2017-10205

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20161124 Description The issue is related to a "negation overflow" caused by a crafted bit pattern in a signed leb number. This can be exploited by remote attackers to have an unspecified impact. The problem lies in...

9.8CVSS0.04974EPSS
SaveExploits1References13
osv_ubuntu
osv_ubuntu
•added 2017/02/24 8:59 p.m.•15 views

UBUNTU-CVE-2016-5027

dwarfform.c in libdwarf 20160115 allows remote attackers to cause a denial of service crash via a crafted elf file...

5.5CVSS7.2AI score0.01498EPSS
SaveExploits0References2
Rows per page
Query Builder