5
CVSSv2

CVE-2016-5043

Published: 17/02/2017 Updated: 01/03/2022
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

The dwarf_dealloc function in libdwarf prior to 20160923 allows remote malicious users to cause a denial of service (out-of-bounds read and crash) via a crafted DWARF section.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libdwarf project libdwarf

Vendor Advisories

The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted DWARF section ...
A vulnerability was found in libdwarf A function dwarf_dealloc() did not check the Dwarf_Ptr space argument before using it which leads to an out-of-bounds read ...