CVE-2016-5037: Null Pointer Dereference
Published Feb 17, 2017
·Updated
The dwarfloadsection function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
Affected Software
1 affected component
Libdwarf Project Libdwarf>=1999-12-14<2016-09-23
Remediation
Patch Available
Event History
Feb 17, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-5037?
CVE-2016-5037 is classified as a high-severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2016-5037?
To remediate CVE-2016-5037, users should upgrade to libdwarf version 20160923 or later.
3
What type of attack can CVE-2016-5037 enable?
CVE-2016-5037 allows remote attackers to launch a denial of service attack through a crafted file.
4
Which software versions are affected by CVE-2016-5037?
CVE-2016-5037 affects libdwarf versions prior to 20160923.
5
What is the primary impact of CVE-2016-5037?
The primary impact of CVE-2016-5037 is a NULL pointer dereference leading to application crashes.