CVE-2016-8681

The dwarfgetabbrevforcode function in dwarfutil.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service out-of-bounds read by calling the dwarfdump command on a crafted file...

CVE-2016-8681

The dwarfgetabbrevforcode function in dwarfutil.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service out-of-bounds read by calling the dwarfdump command on a crafted file...

CVE-2015-8750

libdwarf 20151114 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via a debugabbrev section marked NOBITS in an ELF file...

CVE-2016-2050

The getabbrevarrayinfo function in libdwarf-20151114 allows remote attackers to cause a denial of service out-of-bounds write via a crafted elf file...

DEBIAN-CVE-2016-2050

The getabbrevarrayinfo function in libdwarf-20151114 allows remote attackers to cause a denial of service out-of-bounds write via a crafted elf file...

CVE-2016-7410

The dwarfreadlocsection function in dwarfloc.c in libdwarf 20160613 allows attackers to cause a denial of service buffer over-read via a crafted file...

CVE-2016-9480

libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarfutil.c component, aka DW201611-006...

CVE-2016-5027

dwarfform.c in libdwarf 20160115 allows remote attackers to cause a denial of service crash via a crafted elf file...

libdwarf Memory Corruption Vulnerability

Samsung libdwarf is a set of tools for reading and writing DWARF2 debugging information. A memory corruption vulnerability exists in libdwarf that could be exploited by an attacker to crash an application or execute arbitrary code...

libdwarf Local Denial of Service Vulnerability

Samsung libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in libdwarf that could be exploited by an attacker to crash an application or execute arbitrary code...