CVE-2016-4492: Buffer Overflow
Buffer overflow in the dotype function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.35.2-2Fixed in 2.40-2Fixed in 2.44-3 - Upgrade
Upgrade
debian/htto a version that resolves this vulnerability.Fixed in 2.1.0+repack1-5 - Upgrade
Upgrade
debian/libibertyto a version that resolves this vulnerability.Fixed in 20210106-1Fixed in 20230104-1Fixed in 20250315-1
Event History
Frequently Asked Questions
What is CVE-2016-4492?
CVE-2016-4492 is a vulnerability in the libiberty library that allows remote attackers to cause a denial of service.
How does CVE-2016-4492 affect the affected software?
CVE-2016-4492 affects the binutils, gdb, libiberty, and valgrind packages on Ubuntu and Debian.
What is the severity of CVE-2016-4492?
The severity of CVE-2016-4492 is not specified.
How can I fix CVE-2016-4492?
To fix CVE-2016-4492, update the affected packages to the recommended versions.
Where can I find more information about CVE-2016-4492?
You can find more information about CVE-2016-4492 in the references provided.