CVE-2017-9054: Critical severity Libdwarf Project Libdwarf vulnerability
An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In dwarfdecodesleb128chk() a byte pointer was dereferenced just before it was checked for being in bounds, leading to a heap-based buffer over-read.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9054?
CVE-2017-9054 has a critical severity score of 9.8 based on the CVSS 3.1 metrics.
How do I fix CVE-2017-9054?
To mitigate CVE-2017-9054, you should update to the latest version of the Libdwarf software where the vulnerability has been addressed.
What kind of vulnerability is CVE-2017-9054?
CVE-2017-9054 is a heap-based buffer over-read vulnerability that occurs due to improper boundary checks.
Who is affected by CVE-2017-9054?
Any software that relies on the affected versions of libdwarf is potentially vulnerable to CVE-2017-9054.
What are the potential impacts of CVE-2017-9054?
CVE-2017-9054 can lead to information disclosure or potentially arbitrary code execution due to memory corruption.