Debian Dwarfutils vulnerabilities

CVE-2016-2050 [MEDIUM] CVE-2016-2050: dwarfutils - The get_abbrev_array_info function in libdwarf-20151114 allows remote attackers ... The get_abbrev_array_info function in libdwarf-20151114 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted elf file. Scope: local bookworm: resolved (fixed in 20160507+git20160523.9086738-1) bullseye: resolved (fixed in 20160507+git20160523.9086738-1) forky: resolved (fixed in 20160507+git20160523.9086738-1) sid: resolved (fi

CVE-2016-2091 [LOW] CVE-2016-2091: dwarfutils - The dwarf_read_cie_fde_prefix function in dwarf_frame2.c in libdwarf 20151114 al... The dwarf_read_cie_fde_prefix function in dwarf_frame2.c in libdwarf 20151114 allows attackers to cause a denial of service (out-of-bounds read) via a crafted ELF object file. Scope: local bookworm: resolved (fixed in 20160507-1) bullseye: resolved (fixed in 20160507-1) forky: resolved (fixed in 20160507-1) sid: resolved (fixed in 20160507-1) trixie: resolved (fixed

CVE-2015-8538 [MEDIUM] CVE-2015-8538: dwarfutils - dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV). dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV). Scope: local bookworm: resolved (fixed in 20160507-1) bullseye: resolved (fixed in 20160507-1) forky: resolved (fixed in 20160507-1) sid: resolved (fixed in 20160507-1) trixie: resolved (fixed in 20160507-1)

CVE-2015-8750 [MEDIUM] CVE-2015-8750: dwarfutils - libdwarf 20151114 and earlier allows remote attackers to cause a denial of servi... libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section marked NOBITS in an ELF file. Scope: local bookworm: resolved (fixed in 20160507-1) bullseye: resolved (fixed in 20160507-1) forky: resolved (fixed in 20160507-1) sid: resolved (fixed in 20160507-1) trixie: resolved (f

CVE-2014-9482 [MEDIUM] CVE-2014-9482: dwarfutils - Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 ... Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow remote attackers to cause a denial of service (program crash) via a crafted ELF file. Scope: local bookworm: resolved bullseye: resolved forky: resolved sid: resolved trixie: resolved