libdwarf project libdwarf vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

dwarf_leb.c in libdwarf allows malicious users to cause a denial of service (SIGSEGV).

Libdwarf Project Libdwarf

6.5

CVSSv3

The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote malicious users to cause a denial of service (Segmentation fault) via a crafted file.

Libdwarf Project Libdwarf

6.5

CVSSv3

libdwarf prior to 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.

Libdwarf Project Libdwarf

6.5

CVSSv3

libdwarf prior to 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.

Libdwarf Project Libdwarf

6.5

CVSSv3

libdwarf 20151114 and previous versions allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section marked NOBITS in an ELF file.

Libdwarf Project Libdwarf

6.5

CVSSv3

The print_frame_inst_bytes function in libdwarf prior to 20160923 allows remote malicious users to cause a denial of service (NULL pointer dereference) via an object file with empty bss-like sections.

Libdwarf Project Libdwarf

6.5

CVSSv3

The create_fullest_file_path function in libdwarf prior to 20160923 allows remote malicious users to cause a denial of service (NULL pointer dereference) via a crafted dwarf file.

Libdwarf Project Libdwarf

6.5

CVSSv3

Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow remote malicious users to cause a denial of service (program crash) via a crafted ELF file.

Libdwarf Project Libdwarf

7.5

CVSSv3

The dwarf_dealloc function in libdwarf prior to 20160923 allows remote malicious users to cause a denial of service (out-of-bounds read and crash) via a crafted DWARF section.

Libdwarf Project Libdwarf

6.5

CVSSv3

The _dwarf_calculate_info_section_end_ptr function in libdwarf prior to 20160923 allows remote malicious users to cause a denial of service (NULL pointer dereference) via a crafted file.

Libdwarf Project Libdwarf

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook