CVE-2016-2091: Medium severity red hat libdwarf vulnerability

Published Feb 8, 2016

Updated

The dwarfreadciefdeprefix function in dwarfframe2.c in libdwarf 20151114 allows attackers to cause a denial of service (out-of-bounds read) via a crafted ELF object file.

Affected Software

1 affected component

Libdwarf Project Libdwarf=2015-11-14

Event History

Feb 8, 2016

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What conditions are required for exploitation?

The attacker needs to provide a crafted ELF object file and have it processed by the vulnerable libdwarf code. The CVSS vector indicates local attack access and required user interaction.

What is the expected security impact?

The reported impact is denial of service through an out-of-bounds read. The CVSS metrics indicate availability impact only, with no reported confidentiality or integrity impact.

Which libdwarf release is explicitly identified in the report?

The report identifies libdwarf 20151114, specifically the dwarf_read_cie_fde_prefix function in dwarf_frame2.c. No fixed version is provided in the available data.

CVE-2016-2091: Medium severity red hat libdwarf vulnerability

Affected Software

Event History

Frequently Asked Questions

What conditions are required for exploitation?

What is the expected security impact?

Which libdwarf release is explicitly identified in the report?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required for exploitation?

What is the expected security impact?

Which libdwarf release is explicitly identified in the report?