CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2016-5030
https://notcve.org/view.php?id=CVE-2016-5030
The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. La función _dwarf_calculate_info_section_end_ptr en libdwarf en versiones anteriores a 20160923 permite a los atacantes remotos provocar una denegación de servicio (referencia de puntero NULL) a través de un archivo manipulado. • http://www.openwall.com/lists/oss-security/2016/05/24/1 http://www.openwall.com/lists/oss-security/2016/05/25/1 https://www.prevanders.net/dwarfbug.html • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2016-8680
https://notcve.org/view.php?id=CVE-2016-8680
The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file. La función _dwarf_get_abbrev_for_code en dwarf_util.c en libdwarf 20161001 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites) llamando al comando dwarfdump en un archivo manipulado. • http://www.openwall.com/lists/oss-security/2016/10/16/4 http://www.securityfocus.com/bid/93595 https://blogs.gentoo.org/ago/2016/10/04/libdwarf-heap-based-buffer-overflow-in-_dwarf_get_abbrev_for_code-dwarf_util-c https://bugzilla.redhat.com/show_bug.cgi?id=1385686 https://sourceforge.net/p/libdwarf/code/ci/268c1f18d1d28612af3b72d7c670076b1b88e51c/tree/libdwarf/dwarf_util.c?diff=0b28b923c3bd9827d1d904feed2abadde4fa5de2 • CWE-125: Out-of-bounds Read •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2016-8679
https://notcve.org/view.php?id=CVE-2016-8679
The _dwarf_get_size_of_val function in libdwarf/dwarf_util.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file. La función _dwarf_get_size_of_val en libdwarf/dwarf_util.c en Libdwarf en versiones anteriores a 20161124 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites) llamando al comando dwarfdump en un archivo manipulado. • http://www.openwall.com/lists/oss-security/2016/10/16/3 http://www.securityfocus.com/bid/93601 https://blogs.gentoo.org/ago/2016/10/06/libdwarf-heap-based-buffer-overflow-in-_dwarf_get_size_of_val-dwarf_util-c https://bugzilla.redhat.com/show_bug.cgi?id=1385689 • CWE-125: Out-of-bounds Read •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2016-8681
https://notcve.org/view.php?id=CVE-2016-8681
The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file. La función _dwarf_get_abbrev_for_code en dwarf_util.c en libdwarf 20161001 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites) llamando al comando dwarfdump en un archivo manipulado. • http://www.openwall.com/lists/oss-security/2016/10/16/5 http://www.securityfocus.com/bid/93592 https://blogs.gentoo.org/ago/2016/10/06/libdwarf-heap-based-buffer-overflow-in-_dwarf_get_abbrev_for_code-dwarf_util-c-2 https://bugzilla.redhat.com/show_bug.cgi?id=1385690 • CWE-125: Out-of-bounds Read •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2015-8750
https://notcve.org/view.php?id=CVE-2015-8750
libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section marked NOBITS in an ELF file. Libdwarf 20151114 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída) a través de una sección debug_abbrev marcada NOBITS en un archivo ELF. • http://www.openwall.com/lists/oss-security/2016/01/07/11 https://bugzilla.redhat.com/show_bug.cgi?id=1294264 https://github.com/tomhughes/libdwarf/commit/11750a2838e52953013e3114ef27b3c7b1780697 • CWE-476: NULL Pointer Dereference •