CVE-2016-5044: High severity Libdwarf Project Libdwarf vulnerability
Published Feb 17, 2017
·Updated
The WRITEUNALIGNED function in dwarfelfaccess.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted DWARF section.
Affected Software
1 affected component
Libdwarf Project Libdwarf>=1999-12-14<2016-09-23
Remediation
Patch Available
Event History
Feb 17, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-5044?
CVE-2016-5044 has a severity rating that typically indicates a denial of service vulnerability due to an out-of-bounds write.
2
How do I fix CVE-2016-5044?
To fix CVE-2016-5044, upgrade to a version of libdwarf released after September 23, 2016.
3
What types of attacks can exploit CVE-2016-5044?
CVE-2016-5044 can be exploited by remote attackers through a crafted DWARF section that triggers out-of-bounds writes.
4
What software is affected by CVE-2016-5044?
CVE-2016-5044 affects all versions of libdwarf before 20160923.
5
What are the consequences of an exploit on CVE-2016-5044?
Exploiting CVE-2016-5044 can lead to denial of service, causing the application to crash.