664 matches found
CVE-2017-9054
CVE-2017-9054 describes a heap-based buffer over-read in libdwarf (disclosed as DW201703-002). The issue arises in the function _dwarf_decode_s_leb128_chk(), where a byte pointer is dereferenced before bounds checking, enabling reading beyond allocated memory. Affected component is libdwarf (libr...
CVE-2017-9055
CVE-2017-9055 affects libdwarf; a heap-based buffer over-read occurs in dwarf_formsdata() due to insufficient bounds checks in certain data types. Documented impact is memory read/read crashes; CVSSv3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H indicates a CRITICAL exposure. The connected sources do no...
CVE-2017-9055
An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarfformsdata a few data types were not checked for being in bounds, leading to a heap-based buffer over-read...
CVE-2017-9053
An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarfreadlocexprop is due to a failure to check a pointer for being in bounds in a few places in this function...
CVE-2017-9052
CVE-2017-9052 affects libdwarf (2017-03-21 release); a heap-based buffer over-read occurs in dwarf_formsdata() due to missing bounds checks in multiple spots and a dereference risk in dwarf_attr_list(). The issue is triggered by reading beyond allocated buffers, with potential impact to confident...
CVE-2017-9054
An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In dwarfdecodesleb128chk a byte pointer was dereferenced just before it was checked for being in bounds, leading to a heap-based buffer over-read...
CVE-2017-9053
An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in _dwarf_read_loc_expr_op() is due to a failure to check a pointer for being in bounds (in a few places in this function). This CVE is recorded as CVE-2017-9053. The provided documents desc...
[SECURITY] Fedora 26 Update: libdwarf-20170416-1.fc26
Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see http://www.dwarfstd.org for DWARF specification...
Fedora Update for libdwarf FEDORA-2017-15e7445d67
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 25 : libdwarf (2017-15e7445d67)
Update to libdward 20170416 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
[SECURITY] Fedora 25 Update: libdwarf-20170416-1.fc25
Library to access the DWARF debugging file format which supports source level debugging of a number of procedural languages, such as C, C++, and Fortran. Please see http://www.dwarfstd.org for DWARF specification...
UBUNTU-CVE-2016-5041
dwarfmacro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a debugging information entry using DWARF5 and without a DWATname...
Null pointer dereference
dwarfmacro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a debugging information entry using DWARF5 and without a DWATname...
CVE-2016-5041
dwarfmacro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a debugging information entry using DWARF5 and without a DWATname...
CVE-2016-5041
dwarfmacro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a debugging information entry using DWARF5 and without a DWATname...
CVE-2016-5041
dwarfmacro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a debugging information entry using DWARF5 and without a DWATname...
DEBIAN-CVE-2016-5041
dwarfmacro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a debugging information entry using DWARF5 and without a DWATname...
CVE-2016-5041
CVE-2016-5041 concerns libdwarf. The vulnerability lies in the dwarf_macro5.c path (libdwarf) before 20160923, where a debugging information entry using DWARF5 and without a DW_AT_name can trigger a NULL pointer dereference, leading to a denial of service. The connected records (OSV, NVD, OpenVAS...
