CVE-2016-8679: Medium severity Libdwarf Project Libdwarf vulnerability
Published Oct 17, 2016
·Updated
An out of bounds heap read vulnerability was found in dwarfgetsizeofval triggered by invoking dwarfdump command on crafted file.
Upstream patches:
https://sourceforge.net/p/libdwarf/code/ci/2d14a7792889e33bc542c28d0f3792964c46214f/#diff-13 https://sourceforge.net/p/libdwarf/code/ci/efe48cad0693d6994d9a7b561e1c3833b073a624/#diff-2
CVE assignment:
http://seclists.org/oss-sec/2016/q4/144
Other sources
The dwarfgetsizeofval function in libdwarf/dwarfutil.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.
— MITRE
Affected Software
1 affected component
Libdwarf Project Libdwarf>=1999-12-14<2016-11-24
Remediation
Patch Available
Patch Available
Event History
Oct 17, 2016
Data Sourced
via Red Hat·01:55 PM
DescriptionSeverityAffected Software
Feb 15, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:59 PM
RemedyDescriptionSeverityWeaknessAffected Software