| Package | Affected versions | Patched versions |
|---|---|---|
| libdwarf | ≥ 1999-12-14, ≤ 2016-10-01 |
The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free