6.5
CVSSv3

CVE-2017-9998

Published: 28/06/2017 Updated: 01/03/2022
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote malicious users to cause a denial of service (Segmentation fault) via a crafted file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libdwarf project libdwarf

Vendor Advisories

Debian Bug report logs - #866968 dwarfutils: CVE-2017-9998: SEGV libdwarf/dwarf_lebc:291 in _dwarf_decode_s_leb128_chk Package: src:dwarfutils; Maintainer for src:dwarfutils is Fabian Wolff <fabiwolff@arcorde>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 3 Jul 2017 05:09:01 UTC Severity: norm ...
Debian Bug report logs - #864064 CVE-2017-9055 CVE-2017-9054 CVE-2017-9053 CVE-2017-9052 Package: src:dwarfutils; Maintainer for src:dwarfutils is Fabian Wolff <fabiwolff@arcorde>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Sat, 3 Jun 2017 21:06:01 UTC Severity: important Tags: security, upstream Foun ...
The _dwarf_decode_s_leb128_chk function in dwarf_lebc in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file ...
The _dwarf_decode_s_leb128_chk function in dwarf_lebc in libdwarf through 2017-06-28 allows attackers to cause a denial of service (Segmentation fault) via a crafted file ...