libdwarf up to 20161001 dwarfdump Command dwarf_util.c _dwarf_get_abbrev_for_code out-of-bounds
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
5.2 | $0-$5k | 0.00 |
A vulnerability was found in libdwarf up to 20161001 (Programming Tool Software). It has been rated as problematic. This issue affects the function _dwarf_get_abbrev_for_code
of the file dwarf_util.c of the component dwarfdump Command. The manipulation with an unknown input leads to a out-of-bounds vulnerability. Using CWE to declare the problem leads to CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. Impacted is availability. The summary by CVE is:
The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.
The bug was discovered 02/15/2017. The weakness was released 02/15/2017 by Agostino Sarubbo with Gentoo (oss-sec). The advisory is shared at openwall.com. The identification of this vulnerability is CVE-2016-8681 since 10/15/2016. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details are known, but no exploit is available.
The vulnerability scanner Nessus provides a plugin with the ID 96368 (FreeBSD : libdwarf -- multiple vulnerabilities (83041ca7-d690-11e6-9171-14dae9d210b8)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family FreeBSD Local Security Checks and running in the context l.
Upgrading eliminates this vulnerability. A possible mitigation has been published even before and not after the disclosure of the vulnerability.
The vulnerability is also documented in the vulnerability database at Tenable (96368). Entries connected to this vulnerability are available at 93870, 96999, 97000 and 97083.
Product
Type
Name
Version
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.4VulDB Meta Temp Score: 5.3
VulDB Base Score: 5.3
VulDB Temp Score: 5.1
VulDB Vector: 🔍
VulDB Reliability: 🔍
NVD Base Score: 5.5
NVD Vector: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Out-of-boundsCWE: CWE-125 / CWE-119
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 96368
Nessus Name: FreeBSD : libdwarf -- multiple vulnerabilities (83041ca7-d690-11e6-9171-14dae9d210b8)
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
0-Day Time: 🔍
Timeline
10/08/2016 🔍10/15/2016 🔍
01/09/2017 🔍
01/10/2017 🔍
02/15/2017 🔍
02/15/2017 🔍
02/15/2017 🔍
02/16/2017 🔍
08/15/2020 🔍
Sources
Advisory: openwall.comResearcher: Agostino Sarubbo
Organization: Gentoo
Status: Not defined
Confirmation: 🔍
CVE: CVE-2016-8681 (🔍)
SecurityFocus: 93592 - Libdwarf CVE-2016-8681 Heap Based Buffer Overflow Vulnerability
OSVDB: - CVE-2016-8681 - Libdwarf - Out-of-Bounds Read Issue
See also: 🔍
Entry
Created: 02/16/2017 09:00Updated: 08/15/2020 09:11
Changes: 02/16/2017 09:00 (68), 08/15/2020 09:11 (8)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.