Libdwarf Project Libdwarf vulnerabilities

45 known vulnerabilities affecting libdwarf_project/libdwarf.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL6HIGH14MEDIUM24LOW1

Vulnerabilities

SortPage 2 of 3

CVE-2016-2050P4MEDIUMCVSS 6.5v2015-11-142017-01-31

CVE-2016-2050 [MEDIUM] CWE-787 CVE-2016-2050: The get_abbrev_array_info function in libdwarf-20151114 allows remote attackers to cause a denial of The get_abbrev_array_info function in libdwarf-20151114 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted elf file.

nvd

CVE-2016-5034P4MEDIUMCVSS 6.5≥ 1999-12-14, < 2016-09-232017-02-17

CVE-2016-5034 [MEDIUM] CWE-787 CVE-2016-5034: dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file, related to relocation records.

nvd

CVE-2016-8679P4MEDIUMCVSS 6.5≥ 1999-12-14, < 2016-11-242017-02-15

CVE-2016-8679 [MEDIUM] CWE-125 CVE-2016-8679: The _dwarf_get_size_of_val function in libdwarf/dwarf_util.c in Libdwarf before 20161124 allows remo The _dwarf_get_size_of_val function in libdwarf/dwarf_util.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.

nvd

CVE-2016-8680P4MEDIUMCVSS 6.5≥ 1999-12-14, ≤ 2016-10-012017-02-15

CVE-2016-8680 [MEDIUM] CWE-125 CVE-2016-8680: The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remo The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.

nvd

CVE-2016-5035P4MEDIUMCVSS 6.5≥ 1999-12-14, < 2016-09-232017-02-17

CVE-2016-5035 [MEDIUM] CWE-125 CVE-2016-5035: The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

nvd

CVE-2016-7510P4MEDIUMCVSS 6.5≥ 1999-12-14, < 2016-09-232017-02-17

CVE-2016-7510 [MEDIUM] CWE-125 CVE-2016-7510: The read_line_table_program function in dwarf_line_table_reader_common.c in libdwarf before 20160923 The read_line_table_program function in dwarf_line_table_reader_common.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted input.

nvd

CVE-2020-27545P4MEDIUMCVSS 6.5fixed in 2020-10-172023-04-16

CVE-2020-27545 [MEDIUM] CWE-763 CVE-2020-27545: libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.

nvd

CVE-2016-5037P4MEDIUMCVSS 6.5≥ 1999-12-14, < 2016-09-232017-02-17

CVE-2016-5037 [MEDIUM] CWE-476 CVE-2016-5037: The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a deni The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

nvd

CVE-2016-5033P4MEDIUMCVSS 6.5≥ 1999-12-14, < 2016-09-232017-02-17

CVE-2016-5033 [MEDIUM] CWE-125 CVE-2016-5033: The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a de The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

nvd

CVE-2016-5032P4MEDIUMCVSS 6.5≥ 1999-12-14, < 2016-09-232017-02-17

CVE-2016-5032 [MEDIUM] CWE-125 CVE-2016-5032: The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a denial of service (crash) via a crafted file.

nvd

CVE-2016-5030P4MEDIUMCVSS 6.5≥ 1999-12-14, < 2016-09-232017-02-17

CVE-2016-5030 [MEDIUM] CWE-476 CVE-2016-5030: The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attacke The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

nvd

CVE-2016-5029P4MEDIUMCVSS 6.5≥ 1999-12-14, < 2016-09-232017-02-17

CVE-2016-5029 [MEDIUM] CWE-476 CVE-2016-5029: The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted dwarf file.

nvd

CVE-2016-5028P4MEDIUMCVSS 6.5≥ 1999-12-14, < 2016-09-232017-02-17

CVE-2016-5028 [MEDIUM] CWE-476 CVE-2016-5028: The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a d The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an object file with empty bss-like sections.

nvd

CVE-2019-14249P4MEDIUMCVSS 6.5fixed in 2019-07-052019-07-24

CVE-2019-14249 [MEDIUM] CWE-369 CVE-2019-14249: dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with a zero-size section group (SHT_GROUP), as demonstrated by dwarfdump.

nvdosv

CVE-2015-8750P4MEDIUMCVSS 6.5≥ 1999-12-14, ≤ 2015-11-142017-02-13

CVE-2015-8750 [MEDIUM] CWE-476 CVE-2015-8750: libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer der libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section marked NOBITS in an ELF file.

nvd

CVE-2014-9482P4MEDIUMCVSS 6.5≥ 2013-01-26, ≤ 2014-08-052018-01-16

CVE-2014-9482 [MEDIUM] CWE-416 CVE-2014-9482: Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow remote a Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow remote attackers to cause a denial of service (program crash) via a crafted ELF file.

nvd

CVE-2017-9998P4MEDIUMCVSS 6.5≥ 1999-12-14, ≤ 2017-06-282017-06-28

CVE-2017-9998 [MEDIUM] CWE-119 CVE-2017-9998: The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.

nvd

CVE-2020-28163P4MEDIUMCVSS 6.5fixed in 2020-12-012023-04-16

CVE-2020-28163 [MEDIUM] CWE-476 CVE-2020-28163: libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.

nvd

CVE-2015-8538P4MEDIUMCVSS 6.5≥ 1999-12-14, ≤ 2015-11-142017-06-07

CVE-2015-8538 [MEDIUM] CWE-20 CVE-2015-8538: dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV). dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV).

nvd

CVE-2016-8681P4MEDIUMCVSS 5.5≤ 2016-10-012017-02-15

CVE-2016-8681 [MEDIUM] CWE-125 CVE-2016-8681: The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remo The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.

nvd

← Previous2 / 3Next →