The _dwarf_read_loc_section function in dwarf_loc.c in libdwarf 20160613 allows attackers to cause a denial of service (buffer over-read) via a crafted file.
The product reads data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
http://www.openwall.com/lists/oss-security/2016/09/13/5 | mailing list exploit third party advisory |
http://www.openwall.com/lists/oss-security/2016/09/15/3 | third party advisory mailing list |
http://www.securityfocus.com/bid/92971 | vdb entry third party advisory |