Debian/dwarfutils: medium 6.5

The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted dwarf file.

Action: Upgrade dwarfutils to 20160507+git20160523.9086738-1 or later.

Affected

introduced	fixed	last affected
0	20160507+git20160523.9086738-1	-

Fixed versions

20160507+git20160523.9086738-1

Sources

osv: DEBIAN-CVE-2016-5029#Debian:14/dwarfutils
https://security-tracker.debian.org/tracker/CVE-2016-5029

published 2017-02-17T17:59:00.247Z · modified 2026-09-22T07:03:10.092324777Z · JSON