CVE-2016-7410 — Out-of-bounds Read in Project Libdwarf

CWE-125 — Out-of-bounds ReadCWE-122 — Heap-based Buffer Overflow9 documents7 sources
Severity
5.5MEDIUMNVD
EPSS
0.3%
top 45.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Libdwarf Project Libdwarf
Timeline
PublishedJan 23
Latest updateMay 13

Description

The _dwarf_read_loc_section function in dwarf_loc.c in libdwarf 20160613 allows attackers to cause a denial of service (buffer over-read) via a crafted file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

3
GHSA
GHSA-27m7-4v2p-j66r: The _dwarf_read_loc_section function in dwarf_loc↗2022-05-13
▶
CVEList
CVE-2016-7410: The _dwarf_read_loc_section function in dwarf_loc↗2017-01-23
▶
OSV
CVE-2016-7410: The _dwarf_read_loc_section function in dwarf_loc↗2017-01-23
▶

📋Vendor Advisories

2
Red Hat
libdwarf: Heap buffer overflow in _dwarf_read_loc_section↗2016-09-14
▶
Debian
CVE-2016-7410: dwarfutils - The _dwarf_read_loc_section function in dwarf_loc.c in libdwarf 20160613 allows ...↗2016
▶

💬Community

3
Bugzilla
CVE-2016-7410 libdwarf: Heap buffer overflow in _dwarf_read_loc_section↗2016-09-15
▶
Bugzilla
CVE-2016-7410 libdwarf: Heap buffer overflow in _dwarf_read_loc_section [epel-6]↗2016-09-15
▶
Bugzilla
CVE-2016-7410 libdwarf: Heap buffer overflow in _dwarf_read_loc_section [fedora-all]↗2016-09-15
▶
CVE-2016-7410 — Out-of-bounds Read in Project Libdwarf | cvebase