Unscored CVE-2016-5041 EUVD-2016-5994GHSA-wpr2-jmm7-j55j

dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a debugging …

Published Apr 10, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Package: dwarfutils Package: dwarfutils Ecosystem: Debian Ecosystem: Ubuntu

Description

dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a debugging information entry using DWARF5 and without a DW_AT_name.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	dwarfutils	20160507-1	—
Debian 13	dwarfutils	20160507-1	—
Debian 12	dwarfutils	20160507-1	—

Ubuntu