CVE-2016-9558

概要

参考情報

• openwall.com/lists/oss-security/2016/11/19/6 · Mailing List
• openwall.com/lists/oss-security/2016/11/23/3 · Mailing List
• securityfocus.com/bid/94491 · Third Party Advisory
• blogs.gentoo.org/ago/2016/11/19/libdwarf-negation-overflow-in-dwarf_leb-c · Exploit
• sourceforge.net/p/libdwarf/code/ci/4f19e1050cd8e9ddf2cb6caa061ff2fec4c9b5f9 · Third Party Advisory
• prevanders.net/dwarfbug.html · Third Party Advisory

libdwarf のその他の脆弱性

• CVE-2024-2002高 7.5A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twi…
• CVE-2020-28163中 6.5libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has…
• CVE-2020-27545中 6.5libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted …
• CVE-2022-39170高 8.8libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.
• CVE-2022-34299高 8.1There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.