CVE-2016-9480

published 2016-11-29

CVE-2016-9480: libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file"…

critical 9.1 CVSS 3.0

AV N AC L PR N UI N S U C H I N A H

libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarf_util.c component, aka DW201611-006.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	dwarfutils	< dwarfutils 20161124-1 (bookworm)	dwarfutils 20161124-1 (bookworm)
libdwarf_project	libdwarf	—	—

CVSS provenance

nvd v3.0 9.1 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

osv 9.1 CRITICAL

CWE-119 CWE-122