REDHAT-BUG-1385690: Medium severity libdwarf libdwarf vulnerability

Published Oct 17, 2016

Updated

An out of bounds heap read vulnerability was found in dwarfgetabbrevforcode triggered by invoking dwarfdump command on crafted file.

Upstream patches:

https://sourceforge.net/p/libdwarf/code/ci/2d14a7792889e33bc542c28d0f3792964c46214f/#diff-13 https://sourceforge.net/p/libdwarf/code/ci/efe48cad0693d6994d9a7b561e1c3833b073a624/#diff-2

CVE assignment:

http://seclists.org/oss-sec/2016/q4/146

Affected Software

1 affected component

libdwarf libdwarf

Event History

Oct 17, 2016

Data Sourced

via Red Hat·01:56 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Systems or workflows that invoke the dwarfdump command on externally supplied or otherwise untrusted files are exposed. The vulnerable path is triggered while dwarfdump processes a crafted file.

What does an attacker need to exploit it?

An attacker needs to provide a crafted file and have it processed with dwarfdump. The issue is an out-of-bounds heap read in _dwarf_get_abbrev_for_code.

What can be done if patching is not immediately possible?

Avoid running dwarfdump on untrusted files until the available upstream patches can be applied. Restricting analysis to trusted inputs reduces exposure to the crafted-file trigger.

REDHAT-BUG-1385690: Medium severity libdwarf libdwarf vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What can be done if patching is not immediately possible?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What can be done if patching is not immediately possible?