Unscored CVE-2016-5044 EUVD-2016-5997GHSA-crxr-f9f8-qwr2

The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of…

Published Feb 17, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Package: dwarfutils Package: dwarfutils Ecosystem: Debian Ecosystem: Ubuntu

Description

The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted DWARF section.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	dwarfutils	20160507-1	—
Debian 13	dwarfutils	20160507-1	—
Debian 12	dwarfutils	20160507-1	—

Ubuntu