CVE-2016-9276

概要

参考情報

• openwall.com/lists/oss-security/2016/11/11/9 · Mailing List
• securityfocus.com/bid/94284 · Third Party Advisory
• blogs.gentoo.org/ago/2016/11/07/libdwarf-heap-based-buffer-overflow-in-dwarf_get_aranges_list-dwarf_arange-c · Patch
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• sourceforge.net/p/libdwarf/code/ci/583f8834083b5ef834c497f5b47797e16101a9a6 · Issue Tracking

libdwarf のその他の脆弱性

• CVE-2024-2002高 7.5A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twi…
• CVE-2020-28163中 6.5libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has…
• CVE-2020-27545中 6.5libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted …
• CVE-2022-39170高 8.8libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.
• CVE-2022-34299高 8.1There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.