PT-2017-9217 · None · Libdwarf

Published 2017-02-17 · Updated 2022-03-01 · CVE-2016-7511

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libdwarf version 20160613

Description The issue is related to an integer overflow in the dwarf die deliv.c file, which can be triggered by a crafted file, leading to a denial of service (crash).

Recommendations For libdwarf version 20160613, consider updating to a newer version that addresses the integer overflow issue in the dwarf die deliv.c file.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2016-7511

DLA-635-1

Affected Products

Libdwarf

References · 9

• https://osv.dev/vulnerability/DEBIAN-CVE-2016-7511 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-7511 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-7511 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-7511 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-7511 · Security Note
• https://osv.dev/vulnerability/CVE-2016-7511 · Vendor Advisory
• https://sourceforge.net/p/libdwarf/bugs/3 · Patch
• https://ubuntu.com/security/CVE-2016-7511 · Vendor Advisory
• https://prevanders.net/dwarfbug.html#DW201609-002 · Note