CVE-2016-5041

HIGH 7.5CVE-2016-5041 · Published 10/04/2017 · updated 17/06/2026

In short

CVE-2016-5041 is a HIGH (CVSS 7.5) vulnerability affecting libdwarf (libdwarf project).
Chance of exploitation in the next 30 days (EPSS): 3.4%, higher than 88.7% of all vulnerabilities.
Fix: update to 2016-09-23 or later.

Package	Affected versions	Patched versions
libdwarf libdwarf_project	`≥ 1999-12-14, < 2016-09-23`	`2016-09-23`

Description

dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a debugging information entry using DWARF5 and without a DW_AT_name.

References

openwall.com/lists/oss-security/2016/05/24/1 · Exploit
openwall.com/lists/oss-security/2016/05/25/1 · Exploit
prevanders.net/dwarfbug.html · Vendor Advisory

More vulnerabilities in libdwarf

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

libdwarf

libdwarf_project

≥ 1999-12-14, < 2016-09-23

2016-09-23

More vulnerabilities in libdwarf

See all →