PT-2017-10205 · None · Libdwarf

Publicado 2017-02-28 · Atualizado 2022-03-01 · CVE-2016-9558

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20161124

Description The issue is related to a "negation overflow" caused by a crafted bit pattern in a signed leb number. This can be exploited by remote attackers to have an unspecified impact. The problem lies in the dwarf leb.c and print frames.c files of the libdwarf library.

Recommendations For libdwarf versions prior to 20161124, update to version 20161124 or later to resolve the issue.

Exploit

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2016-9558

Produtos afetados

Libdwarf

Referências · 13

• 🔥 https://blogs.gentoo.org/ago/2016/11/19/libdwarf-negation-overflow-in-dwarf_leb-c · Exploit
• https://ubuntu.com/security/CVE-2016-9558 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-9558 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2016/11/19/6 · Correção
• https://prevanders.net/dwarfbug.html · Nota
• https://sourceforge.net/p/libdwarf/code/ci/4f19e1050cd8e9ddf2cb6caa061ff2fec4c9b5f9/#diff-5 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9558 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-9558 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2016-9558 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-9558 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-9558 · Aviso do Fabricante
• http://securityfocus.com/bid/94491 · Nota
• http://openwall.com/lists/oss-security/2016/11/23/3 · Correção