4.3
CVSSv2

CVE-2016-4487

Published: 24/02/2017 Updated: 28/07/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 384
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

Use-after-free vulnerability in libiberty allows remote malicious users to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "btypevec."

Vulnerable Product Search on Vulmon Subscribe to Product

gnu libiberty

Vendor Advisories

Debian Bug report logs - #840358 Multiple security issues in libiberty Package: ht; Maintainer for ht is Anton Gladky <gladk@debianorg>; Source for ht is src:ht (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Mon, 10 Oct 2016 21:39:02 UTC Severity: grave Tags: fixed-upstream, security, ...
Several security issues were fixed in gdb ...
Several security issues were fixed in libiberty ...
Valgrind could be made to crash or run programs if it opened a specially crafted file ...
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "btypevec" ...

Github Repositories

Fuzzle: Making a Puzzle for Fuzzers (ASE'22)

Fuzzle Fuzzle is a bug synthesizer that generates buggy benchmarks for evaluating fuzzers Fuzzle uses randomly created mazes and path constraints from previous CVEs to generate subject programs The details of Fuzzle can be found in our paper "Fuzzle: Making a Puzzle for Fuzzers" (ASE 2022) Installation To build Fuzzle and setup the docker and python environment, ru

CIDFuzz: Fuzz Testing for Continuous Integration CIDFuzz is built based on AFL, it can be applied to automated testing during continuous integration The specific process is as follows: First, differential analysis is performed to determine the change points generated during continuous integration, the change points are added to the taint source set, and the static analysis i

Evaluating Directed Fuzzers: Are We Heading in the Right Direction? (Paper Artifact) This is the artifact of the paper Evaluating Directed Fuzzers: Are We Heading in the Right Direction? to appear in FSE 2024 The following contents subsumes the contents in INSTALL and REQUIREMENTS files Thus, if carefully read, reading this document is sufficient to understand everything abou