Description
(1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have unspecified impact via a crafted bit pattern in a signed leb number, aka a "negation overflow."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dwarfutils | 20161124-1 | — |
| Debian 13 | dwarfutils | 20161124-1 | — |
| Debian 12 | dwarfutils | 20161124-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | dwarfutils | No fix yet | — |
References
- https://www.prevanders.net/dwarfbug.html
- [oss-security] 20161119 libdwarf: negation overflow in dwarf_leb.c mailing-list
- 94491 vdb-entry
- https://blogs.gentoo.org/ago/2016/11/19/libdwarf-negation-overflow-in-dwarf_leb-c/
- [oss-security] 20161122 Re: libdwarf: negation overflow in dwarf_leb.c mailing-list
- https://sourceforge.net/p/libdwarf/code/ci/4f19e1050cd8e9ddf2cb6caa061ff2fec4c9b5f9/#diff-5