dwarfelfaccess.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file, related to relocation records.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "dwarfdump", "binary_version": "20120410-2+deb7u2build0.14.04.1" }, { "binary_name": "dwarfdump-dbgsym", "binary_version": "20120410-2+deb7u2build0.14.04.1" }, { "binary_name": "libdwarf-dev", "binary_version": "20120410-2+deb7u2build0.14.04.1" } ], "ubuntu_priority": "untriaged" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "dwarfdump", "binary_version": "20120410-2+deb7u2build0.16.04.1" }, { "binary_name": "dwarfdump-dbgsym", "binary_version": "20120410-2+deb7u2build0.16.04.1" }, { "binary_name": "libdwarf-dev", "binary_version": "20120410-2+deb7u2build0.16.04.1" } ], "ubuntu_priority": "untriaged" }