CVE-2016-9480
CRITICALlibdwarf 2016-10-21 - Heap Buffer Over-read in dwarf_util.c
Title source: llmDescription
libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarf_util.c component, aka DW201611-006.
References (4)
Core 4
Core References
Third Party Advisory x_refsource_confirm
https://www.prevanders.net/dwarfbug.html
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://sourceforge.net/p/libdwarf/code/ci/5dd64de047cd5ec479fb11fe7ff2692fd819e5e5/
Permissions Required x_refsource_confirm
https://sourceforge.net/p/libdwarf/bugs/5/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/94980
Scores
CVSS v3
9.1
EPSS
0.0332
EPSS Percentile
87.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Details
CWE
CWE-119
Status
published
Products (1)
libdwarf_project/libdwarf
2016-10-21
Published
Nov 29, 2016
Tracked Since
Feb 18, 2026