Libdwarf Project Libdwarf 2014-01-29

CPE Details

Libdwarf Project Libdwarf 2014-01-29
libdwarf_project
libdwarf
2014-01-29
2020-01-29
17h18 +00:00
2020-01-29
17h18 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:libdwarf_project:libdwarf:2014-01-29:*:*:*:*:*:*:*

Informations

Vendor

libdwarf_project

Product

libdwarf

Version

2014-01-29

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-27545 2023-04-15 00h00 +00:00 libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.
6.5
Medium
CVE-2020-28163 2023-04-15 00h00 +00:00 libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.
6.5
Medium
CVE-2019-14249 2019-07-24 01h30 +00:00 dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with a zero-size section group (SHT_GROUP), as demonstrated by dwarfdump.
6.5
Medium
CVE-2014-9482 2018-01-16 18h00 +00:00 Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow remote attackers to cause a denial of service (program crash) via a crafted ELF file.
6.5
Medium
CVE-2017-9998 2017-06-28 09h14 +00:00 The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.
6.5
Medium
CVE-2015-8538 2017-06-07 18h00 +00:00 dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV).
6.5
Medium
CVE-2016-5041 2017-04-10 14h00 +00:00 dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a debugging information entry using DWARF5 and without a DW_AT_name.
7.5
High
CVE-2016-9275 2017-03-23 17h00 +00:00 Heap-based buffer overflow in the _dwarf_skim_forms function in libdwarf/dwarf_macro5.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read).
7.5
High
CVE-2016-9276 2017-03-23 17h00 +00:00 The dwarf_get_aranges_list function in dwarf_arrange.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read).
7.5
High
CVE-2016-9558 2017-02-28 17h00 +00:00 (1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have unspecified impact via a crafted bit pattern in a signed leb number, aka a "negation overflow."
9.8
Critical
CVE-2016-5028 2017-02-17 16h00 +00:00 The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an object file with empty bss-like sections.
6.5
Medium
CVE-2016-5029 2017-02-17 16h00 +00:00 The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted dwarf file.
6.5
Medium
CVE-2016-5030 2017-02-17 16h00 +00:00 The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
6.5
Medium
CVE-2016-5031 2017-02-17 16h00 +00:00 The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
5.5
Medium
CVE-2016-5032 2017-02-17 16h00 +00:00 The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a denial of service (crash) via a crafted file.
6.5
Medium
CVE-2016-5033 2017-02-17 16h00 +00:00 The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
6.5
Medium
CVE-2016-5034 2017-02-17 16h00 +00:00 dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file, related to relocation records.
6.5
Medium
CVE-2016-5035 2017-02-17 16h00 +00:00 The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
6.5
Medium
CVE-2016-5036 2017-02-17 16h00 +00:00 The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted frame data.
7.5
High
CVE-2016-5037 2017-02-17 16h00 +00:00 The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
6.5
Medium
CVE-2016-5038 2017-02-17 16h00 +00:00 The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted string offset for .debug_str.
7.5
High
CVE-2016-5039 2017-02-17 16h00 +00:00 The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted object with all-bits on.
7.5
High
CVE-2016-5040 2017-02-17 16h00 +00:00 libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large length value in a compilation unit header.
7.5
High
CVE-2016-5042 2017-02-17 16h00 +00:00 The dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause a denial of service (infinite loop and crash) via a crafted DWARF section.
7.5
High
CVE-2016-5043 2017-02-17 16h00 +00:00 The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted DWARF section.
7.5
High
CVE-2016-5044 2017-02-17 16h00 +00:00 The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted DWARF section.
7.5
High
CVE-2016-7510 2017-02-17 16h00 +00:00 The read_line_table_program function in dwarf_line_table_reader_common.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted input.
6.5
Medium
CVE-2016-8679 2017-02-15 20h00 +00:00 The _dwarf_get_size_of_val function in libdwarf/dwarf_util.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.
6.5
Medium
CVE-2016-8680 2017-02-15 20h00 +00:00 The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.
6.5
Medium
CVE-2016-8681 2017-02-15 20h00 +00:00 The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.
5.5
Medium
CVE-2015-8750 2017-02-13 17h00 +00:00 libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section marked NOBITS in an ELF file.
6.5
Medium
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.