CVE-2017-9998: Buffer Overflow
Published Jun 28, 2017
·Updated
The dwarfdecodesleb128chk function in dwarfleb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.
Affected Software
1 affected component
Libdwarf Project Libdwarf>=1999-12-14<=2017-06-28
Event History
Jun 28, 2017
CVE Published
via MITRE·11:14 AM
Data Sourced
via MITRE·11:14 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9998?
The severity of CVE-2017-9998 is rated as medium with a score of 6.5.
2
How do I fix CVE-2017-9998?
To fix CVE-2017-9998, update to the latest version of the Libdwarf project that addresses this vulnerability.
3
What types of attacks does CVE-2017-9998 allow?
CVE-2017-9998 allows remote attackers to cause a denial of service through a segmentation fault.
4
What is affected by CVE-2017-9998?
CVE-2017-9998 affects libdwarf versions prior to 2017-06-28.
5
Is there a known workaround for CVE-2017-9998?
There are currently no known workarounds for CVE-2017-9998; the best mitigation is to update the software.