CVE-2016-8680: Medium severity Libdwarf Project Libdwarf vulnerability

Q: Who is exposed to this issue?

Systems using libdwarf 20161001 or earlier are affected when they run the dwarfdump command on files that may be attacker-crafted.

Q: What must an attacker do to trigger the vulnerability?

The attacker must provide a crafted file and induce a user or process to invoke dwarfdump on it. Exploitation causes an out-of-bounds heap read that can result in denial of service.

Q: How can I determine whether my environment is affected?

Check the installed libdwarf version and whether dwarfdump is used to inspect untrusted or externally supplied files. Versions 20161001 and earlier are identified as affected.

Q: What should be done if the issue cannot be patched immediately?

Avoid running dwarfdump on untrusted files until the available upstream patch can be applied.

Published Oct 17, 2016

Updated

An out of bounds heap read vulnerability was found in dwarfgetabbrevforcode triggered by invoking dwarfdump command on crafted file.

Upstream patch:

https://sourceforge.net/p/libdwarf/code/ci/268c1f18d1d28612af3b72d7c670076b1b88e51c/tree/libdwarf/dwarfutil.c?diff=0b28b923c3bd9827d1d904feed2abadde4fa5de2

CVE assignment:

http://seclists.org/oss-sec/2016/q4/145

Other sources

The dwarfgetabbrevforcode function in dwarfutil.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.

— MITRE

Affected Software

1 affected component

Libdwarf Project Libdwarf>=1999-12-14<=2016-10-01

Remediation

Event History

Oct 17, 2016

Data Sourced

via Red Hat·01:47 PM

DescriptionSeverityAffected Software

Feb 15, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Data Sourced

via NVD·09:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Systems using libdwarf 20161001 or earlier are affected when they run the dwarfdump command on files that may be attacker-crafted.

What must an attacker do to trigger the vulnerability?

The attacker must provide a crafted file and induce a user or process to invoke dwarfdump on it. Exploitation causes an out-of-bounds heap read that can result in denial of service.

How can I determine whether my environment is affected?

Check the installed libdwarf version and whether dwarfdump is used to inspect untrusted or externally supplied files. Versions 20161001 and earlier are identified as affected.

What should be done if the issue cannot be patched immediately?

Avoid running dwarfdump on untrusted files until the available upstream patch can be applied.

CVE-2016-8680: Medium severity Libdwarf Project Libdwarf vulnerability

Other sources

Affected Software

Remediation

Patch Available

Patch Available

Patch Available

Patch Available

Event History

Frequently Asked Questions

Who is exposed to this issue?

What must an attacker do to trigger the vulnerability?

How can I determine whether my environment is affected?

What should be done if the issue cannot be patched immediately?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What must an attacker do to trigger the vulnerability?

How can I determine whether my environment is affected?

What should be done if the issue cannot be patched immediately?