CVE-2016-5033 — Out-of-bounds Read in Project Libdwarf

CWE-125 — Out-of-bounds Read9 documents7 sources

Severity

6.5MEDIUMNVD

EPSS

0.6%

top 29.34%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Libdwarf Project Libdwarf

Timeline

PublishedFeb 17

Latest updateMay 13

Description

The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages1 packages

▶NVDlibdwarf_project/libdwarf1999-12-14 — 2016-09-23

Patches

Patch: www.openwall.com ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

GHSA

GHSA-q96g-cqh9-7qfc: The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted↗2022-05-13

▶

OSV

CVE-2016-5033: The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted↗2017-02-17

▶

CVEList

CVE-2016-5033: The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted↗2017-02-17

▶

📋Vendor Advisories

Red Hat

libdwarf: Out-of-bounds read in print_explroc_content↗2016-05-18

▶

Debian

CVE-2016-5033: dwarfutils - The print_exprloc_content function in libdwarf before 20160923 allows remote att...↗2016

▶

💬Community

Bugzilla

CVE-2016-5028 CVE-2016-5029 CVE-2016-5030 CVE-2016-5031 CVE-2016-5032 CVE-2016-5033 CVE-2016-5034 CVE-2016-5035 CVE-2016-5036 CVE-2016-5038 libdwarf: various flaws [epel-6]↗2016-05-26

▶

Bugzilla

CVE-2016-5028 CVE-2016-5029 CVE-2016-5030 CVE-2016-5031 CVE-2016-5032 CVE-2016-5033 CVE-2016-5034 CVE-2016-5035 CVE-2016-5036 CVE-2016-5038 libdwarf: various flaws [fedora-all]↗2016-05-26

▶

Bugzilla

CVE-2016-5033 libdwarf: Out-of-bounds read in print_explroc_content↗2016-05-26

▶