PT-2017-8505 · Gnu+1 · Libiberty+1

Marcel Böhme

·

Publicado

2017-02-24

·

Atualizado

2021-07-21

·

CVE-2016-4490

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions libiberty (affected versions not specified)
Description The issue is related to an inconsistent use of long and int types for lengths, which can cause a denial of service. This can lead to a segmentation fault and crash when a crafted binary is used. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2016-4490
DLA-552-1
MGASA-2017-0222
MGASA-2018-0034
MGASA-2018-0046
MGASA-2019-0169
USN-3337-1
USN-3367-1
USN-3368-1
USN-4336-2

Produtos afetados

Ubuntu
Libiberty