CVE-2016-8681

CVE-2016-8681 affects libdwarf (dwarf_util.c, _dwarf_get_abbrev_for_code) in 2016-10-01 and earlier; vulnerable function can cause a denial of service via an out-of-bounds read when a crafted file is processed by dwarfdump. Multiple advisories note patch availability or versions less than 0.9.0-1...

CVE-2016-5027

CVE-2016-5027 concerns a denial-of-service flaw in libdwarf, where an attacker can crash the process by feeding a crafted ELF file. The description explicitly states: “dwarf_form.c in libdwarf 20160115 allows remote attackers to cause a denial of service (crash) via a crafted elf file.” The conne...

CVE-2016-7410

CVE-2016-7410 affects libdwarf (libdwarf 20160613) via a vulnerability in the _dwarf_read_loc_section function in dwarf_loc.c. A crafted file can trigger a denial of service (buffer over-read). The vulnerability is tied to reading the DWARF location section; no vendor patch/versions or remediatio...

CVE-2016-5031

CVE-2016-5031 affects the libdwarf library. According to the connected sources, the vulnerability is a denial-of-service caused by an out-of-bounds read in the function print_frame_inst_bytes and related code paths. The issue is present in libdwarf before 2016-09-23, triggered by processing a cra...

CVE-2016-7511

CVE-2016-7511 describes an integer overflow in the dwarf_die_deliv.c of libdwarf 20160613 that can be triggered by a crafted file, allowing remote attackers to cause a denial of service (crash). The vulnerability is tied to the libdwarf project and specifically its handling of DWARF delivery in d...