CVE-2016-5028
published 2017-02-17CVE-2016-5028: The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an object…
PriorityP425medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
2.92%
85.5th percentile
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an object file with empty bss-like sections.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | dwarfutils | < dwarfutils 20160507+git20160523.9086738-1 (bookworm) | dwarfutils 20160507+git20160523.9086738-1 (bookworm) |
| libdwarf_project | libdwarf | >= 1999-12-14 < 2016-09-23 | 2016-09-23 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv6.5MEDIUM
vendor_debian6.5MEDIUM
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gx4v-h6f2-c9q3: The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an
ghsa_unreviewed·2022-05-13
CVE-2016-5028 [MEDIUM] CWE-476 GHSA-gx4v-h6f2-c9q3: The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an object file with empty bss-like sections.
OSV
CVE-2016-5028: The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an
osv·2017-02-17·CVSS 6.5
CVE-2016-5028 [MEDIUM] CVE-2016-5028: The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an object file with empty bss-like sections.
Red Hat
libdwarf: Null pointer dereference in print_frame_inst_bytes()
vendor_redhat·2016-05-23·CVSS 6.5
CVE-2016-5028 [MEDIUM] CWE-476 libdwarf: Null pointer dereference in print_frame_inst_bytes()
libdwarf: Null pointer dereference in print_frame_inst_bytes()
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an object file with empty bss-like sections.
Package: libdwarf (Red Hat Enterprise Linux 7) - Will not fix
Debian
CVE-2016-5028: dwarfutils - The print_frame_inst_bytes function in libdwarf before 20160923 allows remote at...
vendor_debian·2016·CVSS 6.5
CVE-2016-5028 [MEDIUM] CVE-2016-5028: dwarfutils - The print_frame_inst_bytes function in libdwarf before 20160923 allows remote at...
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an object file with empty bss-like sections.
Scope: local
bookworm: resolved (fixed in 20160507+git20160523.9086738-1)
bullseye: resolved (fixed in 20160507+git20160523.9086738-1)
forky: resolved (fixed in 20160507+git20160523.9086738-1)
sid: resolved (fixed in 20160507+git20160523.9086738-1)
trixie: resolved (fixed in 20160507+git20160523.9086738-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2016-5028 CVE-2016-5029 CVE-2016-5030 CVE-2016-5031 CVE-2016-5032 CVE-2016-5033 CVE-2016-5034 CVE-2016-5035 CVE-2016-5036 CVE-2016-5038 libdwarf: various flaws [epel-6]
bugzilla·2016-05-26·CVSS 6.5
CVE-2016-5028 [MEDIUM] CVE-2016-5028 CVE-2016-5029 CVE-2016-5030 CVE-2016-5031 CVE-2016-5032 CVE-2016-5033 CVE-2016-5034 CVE-2016-5035 CVE-2016-5036 CVE-2016-5038 libdwarf: various flaws [epel-6]
CVE-2016-5028 CVE-2016-5029 CVE-2016-5030 CVE-2016-5031 CVE-2016-5032 CVE-2016-5033 CVE-2016-5034 CVE-2016-5035 CVE-2016-5036 CVE-2016-5038 libdwarf: various flaws [epel-6]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RP
Bugzilla
CVE-2016-5028 CVE-2016-5029 CVE-2016-5030 CVE-2016-5031 CVE-2016-5032 CVE-2016-5033 CVE-2016-5034 CVE-2016-5035 CVE-2016-5036 CVE-2016-5038 libdwarf: various flaws [fedora-all]
bugzilla·2016-05-26·CVSS 6.5
CVE-2016-5028 [MEDIUM] CVE-2016-5028 CVE-2016-5029 CVE-2016-5030 CVE-2016-5031 CVE-2016-5032 CVE-2016-5033 CVE-2016-5034 CVE-2016-5035 CVE-2016-5036 CVE-2016-5038 libdwarf: various flaws [fedora-all]
CVE-2016-5028 CVE-2016-5029 CVE-2016-5030 CVE-2016-5031 CVE-2016-5032 CVE-2016-5033 CVE-2016-5034 CVE-2016-5035 CVE-2016-5036 CVE-2016-5038 libdwarf: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM
Bugzilla
CVE-2016-5028 libdwarf: Null pointer dereference in print_frame_inst_bytes()
bugzilla·2016-05-26·CVSS 6.5
CVE-2016-5028 [MEDIUM] CVE-2016-5028 libdwarf: Null pointer dereference in print_frame_inst_bytes()
CVE-2016-5028 libdwarf: Null pointer dereference in print_frame_inst_bytes()
A null pointer dereference vulnerability was found in libdwarf. It exists due to a corrupted object file. Libdwarf was not dealing with empty (bss-like) sections since it really did not expect to see such in sections it reads. Now libdwarf catches the object error so dwarfdump sees the section as empty.
References (with a link to PoC):
http://seclists.org/oss-sec/2016/q2/393
External references:
https://www.prevanders.net/dwarfbug.html
Upstream fix:
https://sourceforge.net/p/libdwarf/code/ci/a55b958926cc67f89a512ed30bb5a22b0adb10f4
Discussion:
If you want to report an issue with the Fedora package then please do so against the proper component.
In the meantime please stop adding me to your RedHat interna
http://www.openwall.com/lists/oss-security/2016/05/24/1http://www.openwall.com/lists/oss-security/2016/05/25/1https://www.prevanders.net/dwarfbug.htmlhttp://www.openwall.com/lists/oss-security/2016/05/24/1http://www.openwall.com/lists/oss-security/2016/05/25/1https://www.prevanders.net/dwarfbug.html
2017-02-17
Published