CVE-2015-8750: Null Pointer Dereference
Published Feb 13, 2017
·Updated
libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debugabbrev section marked NOBITS in an ELF file.
Affected Software
1 affected component
Libdwarf Project Libdwarf>=1999-12-14<=2015-11-14
Remediation
Patch Available
Event History
Feb 13, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2015-8750?
The severity of CVE-2015-8750 is medium with a CVSS score of 6.5.
2
What impact does CVE-2015-8750 have on systems?
CVE-2015-8750 can lead to a denial of service due to a NULL pointer dereference and crash.
3
How do I fix CVE-2015-8750?
The vulnerability CVE-2015-8750 can be fixed by applying the available patch.
4
Which software is affected by CVE-2015-8750?
CVE-2015-8750 affects the Libdwarf software up to version 20151114.
5
Is there a way to mitigate CVE-2015-8750 if I cannot apply the patch?
Mitigation options include restricting access to untrusted ELF files that may exploit CVE-2015-8750.