CVE-2016-5030

MEDIUM 6.5CVE-2016-5030 · Published 17/02/2017 · updated 17/06/2026

In short

CVE-2016-5030 is a MEDIUM (CVSS 6.5) vulnerability affecting libdwarf (libdwarf project).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.1% of all vulnerabilities.
Fix: update to 2016-09-23 or later.

Package	Affected versions	Patched versions
libdwarf libdwarf_project	`≥ 1999-12-14, < 2016-09-23`	`2016-09-23`

Description

The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

References

openwall.com/lists/oss-security/2016/05/24/1 · Mailing List
openwall.com/lists/oss-security/2016/05/25/1 · Exploit
prevanders.net/dwarfbug.html · Third Party Advisory

More vulnerabilities in libdwarf

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

libdwarf

libdwarf_project

≥ 1999-12-14, < 2016-09-23

2016-09-23

More vulnerabilities in libdwarf

See all →