Lucene search
+L

753 matches found

Positive Technologies
Positive Technologies
•added 2017/02/17 12:00 a.m.•4 views

PT-2017-8664

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by providing a crafted file. This is related to the dwarf load section function in libdwar...

6.5CVSS0.0292EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/17 12:00 a.m.•4 views

CVE-2016-5042: Loop with Unreachable Exit Condition

The dwarfgetarangeslist function in libdwarf before 20160923 allows remote attackers to cause a denial of service infinite loop and crash via a crafted DWARF section...

7.5CVSS8.2AI score0.04125EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2017/02/17 12:00 a.m.•3 views

PT-2017-8669

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and crash, via a crafted DWARF section. This is due to a problem in the dwarf get aranges list...

7.5CVSS0.04125EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2017/02/17 12:00 a.m.•5 views

PT-2017-8670

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and crash, via a crafted DWARF section. This is due to a problem in the dwarf dealloc function...

7.5CVSS0.0426EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/17 12:00 a.m.•6 views

CVE-2016-5029: NULL Pointer Dereference

The createfullestfilepath function in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted dwarf file...

6.5CVSS8.1AI score0.0292EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/17 12:00 a.m.•5 views

CVE-2016-5043: Out-of-bounds Read

The dwarfdealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted DWARF section...

7.5CVSS8.2AI score0.0426EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2017/02/17 12:00 a.m.•6 views

PT-2017-8671

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds write and crash, via a crafted DWARF section. This is due to a problem in the WRITE UNALIGNED functio...

7.5CVSS0.0426EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2017/02/17 12:00 a.m.•4 views

PT-2017-8662

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, via a crafted file. This is due to a problem in the dwarf read line table header function in...

6.5CVSS0.0292EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2017/02/17 12:00 a.m.•5 views

PT-2017-8657

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file. This is due to a problem in the dwarf calculate info section end ptr function...

6.5CVSS0.0292EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2017/02/17 12:00 a.m.•3 views

PT-2017-8659

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service crash via a crafted file. This is due to a problem in the dwarf get xu hash entry function. Recommendations For versions prior to...

6.5CVSS0.0292EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2017/02/17 12:00 a.m.•2 views

PT-2017-8661

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds write, by providing a crafted file. This is related to the handling of relocation records in the dwar...

6.5CVSS0.02933EPSS
SaveExploits1References10
osv_azl
osv_azl
•added 2017/02/15 9:59 p.m.•15 views

AZL-33326 CVE-2016-8681 affecting package libdwarf for versions less than 0.9.0

The dwarfgetabbrevforcode function in dwarfutil.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service out-of-bounds read by calling the dwarfdump command on a crafted file...

5.5CVSS6.8AI score0.02083EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2017/01/23 12:00 a.m.•5 views

PT-2017-9184

Name of the Vulnerable Software and Affected Versions libdwarf version 20160613 Description The issue allows attackers to cause a denial of service, specifically a buffer over-read, by using a crafted file. This is related to the dwarf read loc section function in dwarf loc.c. Recommendations For...

5.5CVSS0.01485EPSS
SaveExploits1References7
CNVD
CNVD
•added 2016/11/30 12:00 a.m.•21 views

libdwarf Heap Buffer Overflow Vulnerability

libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap-based buffer overflow vulnerability exists in libdwarf. An attacker could exploit this vulnerability by using a malformed dwarf file to obtain sensitive information or cause a denial of service...

9.1CVSS7.1AI score0.03635EPSS
SaveExploits0References1
NVD
NVD
•added 2016/11/29 11:59 p.m.•26 views

CVE-2016-9480

libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarfutil.c component, aka DW201611-006...

9.1CVSS9AI score0.03635EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2016/11/29 11:59 p.m.•16 views

UBUNTU-CVE-2016-9480

libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarfutil.c component, aka DW201611-006...

9.1CVSS7.3AI score0.03635EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2016/11/29 11:00 p.m.•45 views

CVE-2016-9480

libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarfutil.c component, aka DW201611-006...

9.2AI score0.03635EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2016/11/29 12:00 a.m.•4 views

PT-2016-7765

Name of the Vulnerable Software and Affected Versions libdwarf version 2016-10-21 Description The issue allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affectin...

9.1CVSS0.03635EPSS
SaveExploits0References11
CNVD
CNVD
•added 2016/11/17 12:00 a.m.•21 views

libdwarf heap buffer overflow vulnerability (CNVD-2016-11348)

libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in libdwarf. An attacker could exploit this vulnerability to execute arbitrary code in the context of an application...

7.5CVSS8AI score0.04224EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/10/20 12:00 a.m.•18 views

libdwarf heap buffer overflow vulnerability (CNVD-2016-10045)

libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in the libdwarf function dwarfgetsizeofval, which can be exploited by an attacker to execute arbitrary code...

6.5CVSS7.8AI score0.02922EPSS
SaveExploits1References1
Rows per page
Query Builder