CVE-2016-5042

HIGH 7.5CVE-2016-5042 · Published 17/02/2017 · updated 17/06/2026

In short

CVE-2016-5042 is a HIGH (CVSS 7.5) vulnerability affecting libdwarf (libdwarf project).
Chance of exploitation in the next 30 days (EPSS): 4.1%, higher than 90.8% of all vulnerabilities.
Fix: update to 2016-09-23 or later.

Package	Affected versions	Patched versions
libdwarf libdwarf_project	`≥ 1999-12-14, < 2016-09-23`	`2016-09-23`

Description

The dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause a denial of service (infinite loop and crash) via a crafted DWARF section.

References

openwall.com/lists/oss-security/2016/05/24/1 · Mailing List
openwall.com/lists/oss-security/2016/05/25/1 · Exploit
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
prevanders.net/dwarfbug.html · Third Party Advisory

More vulnerabilities in libdwarf

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

libdwarf

libdwarf_project

≥ 1999-12-14, < 2016-09-23

2016-09-23

More vulnerabilities in libdwarf

See all →