CVE-2015-8750

CVE-2015-8750 affects the libdwarf component (up to and including 20151114) and is due to a NULL pointer dereference in a debug_abbrev section marked NOBITS inside an ELF file, which can enable a remote denial of service (crash). The provided documents consistently describe the vulnerability as a...

CVE-2015-8538

CVE-2015-8538 affects libdwarf, specifically the dwarf_leb.c routine, allowing attackers to cause a denial of service (SIGSEGV). The connected sources confirm this is a DoS in libdwarf and reference multiple advisories; no concrete patch/version remediation details are provided in the supplied do...

CVE-2016-2091

The CVE-2016-2091 vulnerability affects libdwarf, specifically the dwarf_read_cie_fde_prefix function in dwarf_frame2.c. A crafted ELF object file can trigger a denial of service via an out-of-bounds read. Public disclosures in connected sources confirm this issue within libdwarf and note multipl...

CVE-2016-2050

CVE-2016-2050 affects libdwarf-20151114 (get_abbrev_array_info). A crafted ELF file can trigger an out-of-bounds write, enabling remote denial of service. Debian/Dwarfutils advisory DLA-669-1 notes this alongside other related CVEs and states fixes in version 20120410-2+deb7u2 for Debian 7; other...