在 dwarfutils（读取/使用和编写/生成 DWARF 调试信息所使用的工具和库）中发现多个漏洞。通用漏洞和暴露计划识别以下问题：

CVE-2015-8538

特别构建的 ELF 文件可导致分段错误。

CVE-2015-8750

特别构建的 ELF 文件可导致空指针取消引用。

CVE-2016-2050

越界写入

CVE-2016-2091

越界读取

CVE-2016-5034

越界写入

CVE-2016-5036

越界读取

CVE-2016-5038

越界读取

CVE-2016-5039

越界读取

CVE-2016-5042

特别构建的 DWARF 段可导致无限循环，从不断增加的内存地址读取数据，直到应用程序崩溃。

对于 Debian 7“Wheezy”，这些问题已在版本 20120410-2+deb7u2 中修复。

我们建议您升级 dwarfutils 程序包。

注意：Tenable Network Security 已直接从 DLA 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动清理和排版。

DWARF デバッグ情報の読み取り/利用および書き込み/生成のためのツールとライブラリである dwarfutils にいくつかの脆弱性が発見されました。Common Vulnerabilities and Exposures プロジェクトでは、次の問題を特定しています : CVE-2015-8538 : 特別に細工された ELF ファイルが、セグメンテーション違反を引き起こす可能性があります。CVE-2015-8750 : 特別に細工された ELF ファイルが NULL ポインターデリファレンスを引き起こす可能性があります。CVE-2016-2050 : 領域外書き込み。CVE-2016-2091 : 領域外読み取り。CVE-2016-5034 : 領域外書き込み。CVE-2016-5036 : 領域外読み取り。CVE-2016-5038 : 領域外読み取り。CVE-2016-5039 : 領域外読み取り。CVE-2016-5042 : 特別に作成された DWARF セクションが無限ループを引き起こし、アプリケーションがクラッシュするまで増加するメモリアドレスから読み取る可能性があります。Debian 7 'Wheezy' では、これらの問題はバージョン 20120410-2+deb7u2 で修正されています。dwarfutils パッケージをアップグレードすることを推奨します。注 : Tenable Network Securityは、前述の記述ブロックをDLAセキュリティアドバイザリから直接抽出しています。Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

在 dwarfutils (讀取/消耗和寫入/產生 DWARF 除錯資訊的工具和程式庫) 中發現數個弱點。Common Vulnerabilities and Exposures 專案發現下列問題：

CVE-2015-8538

特別建構的 ELF 檔案可造成分割錯誤。

CVE-2015-8750

特別建構的 ELF 檔案可造成 NULL 指標解除參照。

CVE-2016-2050

超出邊界寫入

CVE-2016-2091

超出邊界讀取

CVE-2016-5034

超出邊界寫入

CVE-2016-5036

超出邊界讀取

CVE-2016-5038

超出邊界讀取

CVE-2016-5039

超出邊界讀取

CVE-2016-5042

特別建構的 DWARF 區段可造成無限迴圈，從不斷增加的記憶體位址進行讀取，直到應用程式當機。

針對 Debian 7「Wheezy」，已在 20120410-2+deb7u2 版本中修正這些問題。

建議您升級 dwarfutils 套件。

注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

Several vulnerabilities were discovered in dwarfutils, a tool and library for reading/consuming and writing/producing DWARF debugging information. The Common Vulnerabilities and Exposures project identifies the following issues :

CVE-2015-8538

A specially crafted ELF file can cause a segmentation fault.

CVE-2015-8750

A specially crafted ELF file can cause a NULL pointer dereference.

CVE-2016-2050

Out-of-bounds write

CVE-2016-2091

Out-of-bounds read

CVE-2016-5034

Out-of-bounds write

CVE-2016-5036

Out-of-bounds read

CVE-2016-5038

Out-of-bounds read

CVE-2016-5039

Out-of-bounds read

CVE-2016-5042

A specially crafted DWARF section can cause an infinite loop, reading from increasing memory addresses until the application crashes.

For Debian 7 'Wheezy', these problems have been fixed in version 20120410-2+deb7u2.

We recommend that you upgrade your dwarfutils packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 20160923 より前の libdwarf にある get_attr_value 関数により、リモートの攻撃者が、all-bits がオンの細工されたオブジェクトを介して、サービス拒否（領域外読み取り）を引き起こす可能性があります。 （CVE-2016-5039）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 20160923 之前的 libdwarf 中，get_attr_value 函式允許遠端攻擊者透過所有位元開啟的特製物件，造成拒絕服務 (超出邊界讀取)。 (CVE-2016-5039)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 20160923 之前的 libdwarf 中的 get_attr_value 函数允许远程攻击者通过将 all-bit 设置为 on 的构建对象来造成拒绝服务（越界读取）。 (CVE-2016-5039)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

According to the versions of the libdwarf package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - dwarf_leb.c in libdwarf allows attackers to cause a     denial of service (SIGSEGV).(CVE-2015-8538)

  - The dwarf_dealloc function in libdwarf before 20160923     allows remote attackers to cause a denial of service     (out-of-bounds read and crash) via a crafted DWARF     section.(CVE-2016-5043)

  - The dwarf_get_aranges_list function in libdwarf before     20160923 allows remote attackers to cause a denial of     service (infinite loop and crash) via a crafted DWARF     section.(CVE-2016-5042)

  - libdwarf before 20160923 allows remote attackers to     cause a denial of service (out-of-bounds read and     crash) via a large length value in a compilation unit     header.(CVE-2016-5040)

  - The get_attr_value function in libdwarf before 20160923     allows remote attackers to cause a denial of service     (out-of-bounds read) via a crafted object with all-bits     on.(CVE-2016-5039)

  - The dwarf_get_macro_startend_file function in     dwarf_macro5.c in libdwarf before 20160923 allows     remote attackers to cause a denial of service     (out-of-bounds read) via a crafted string offset for     .debug_str.(CVE-2016-5038)

  - The dump_block function in print_sections.c in libdwarf     before 20160923 allows remote attackers to cause a     denial of service (out-of-bounds read) via crafted     frame data.(CVE-2016-5036)

  - dwarf_elf_access.c in libdwarf before 20160923 allows     remote attackers to cause a denial of service     (out-of-bounds write) via a crafted file, related to     relocation records.(CVE-2016-5034)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libdwarf package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Use-after-free vulnerability in dwarfdump in libdwarf     20130126 through 20140805 might allow remote attackers     to cause a denial of service (program crash) via a     crafted ELF file.(CVE-2014-9482)

  - The print_frame_inst_bytes function in libdwarf before     20160923 allows remote attackers to cause a denial of     service (NULL pointer dereference) via an object file     with empty bss-like sections.(CVE-2016-5028)

  - The create_fullest_file_path function in libdwarf     before 20160923 allows remote attackers to cause a     denial of service (NULL pointer dereference) via a     crafted dwarf file.(CVE-2016-5029)

  - The _dwarf_calculate_info_section_end_ptr function in     libdwarf before 20160923 allows remote attackers to     cause a denial of service (NULL pointer dereference)     via a crafted file.(CVE-2016-5030)

  - The print_frame_inst_bytes function in libdwarf before     20160923 allows remote attackers to cause a denial of     service (out-of-bounds read) via a crafted     file.(CVE-2016-5031)

  - The dwarf_get_xu_hash_entry function in libdwarf before     20160923 allows remote attackers to cause a denial of     service (crash) via a crafted file.(CVE-2016-5032)

  - The print_exprloc_content function in libdwarf before     20160923 allows remote attackers to cause a denial of     service (out-of-bounds read) via a crafted     file.(CVE-2016-5033)

  - dwarf_elf_access.c in libdwarf before 20160923 allows     remote attackers to cause a denial of service     (out-of-bounds write) via a crafted file, related to     relocation records.(CVE-2016-5034)

  - The _dwarf_read_line_table_header function in     dwarf_line_table_reader.c in libdwarf before 20160923     allows remote attackers to cause a denial of service     (out-of-bounds read) via a crafted file.(CVE-2016-5035)

  - The dump_block function in print_sections.c in libdwarf     before 20160923 allows remote attackers to cause a     denial of service (out-of-bounds read) via crafted     frame data.(CVE-2016-5036)

  - The _dwarf_load_section function in libdwarf before     20160923 allows remote attackers to cause a denial of     service (NULL pointer dereference) via a crafted     file.(CVE-2016-5037)

  - The dwarf_get_macro_startend_file function in     dwarf_macro5.c in libdwarf before 20160923 allows     remote attackers to cause a denial of service     (out-of-bounds read) via a crafted string offset for     .debug_str.(CVE-2016-5038)

  - The get_attr_value function in libdwarf before 20160923     allows remote attackers to cause a denial of service     (out-of-bounds read) via a crafted object with all-bits     on.(CVE-2016-5039)

  - libdwarf before 20160923 allows remote attackers to     cause a denial of service (out-of-bounds read and     crash) via a large length value in a compilation unit     header.(CVE-2016-5040)

  - dwarf_macro5.c in libdwarf before 20160923 allows     remote attackers to cause a denial of service (NULL     pointer dereference) via a debugging information entry     using DWARF5 and without a DW_AT_name.(CVE-2016-5041)

  - The dwarf_get_aranges_list function in libdwarf before     20160923 allows remote attackers to cause a denial of     service (infinite loop and crash) via a crafted DWARF     section.(CVE-2016-5042)

  - The dwarf_dealloc function in libdwarf before 20160923     allows remote attackers to cause a denial of service     (out-of-bounds read and crash) via a crafted DWARF     section.(CVE-2016-5043)

  - The WRITE_UNALIGNED function in dwarf_elf_access.c in     libdwarf before 20160923 allows remote attackers to     cause a denial of service (out-of-bounds write and     crash) via a crafted DWARF section.(CVE-2016-5044)

  - The read_line_table_program function in     dwarf_line_table_reader_common.c in libdwarf before     20160923 allows remote attackers to cause a denial of     service (out-of-bounds read) via crafted     input.(CVE-2016-7510)

  - The _dwarf_get_size_of_val function in     libdwarf/dwarf_util.c in Libdwarf before 20161124     allows remote attackers to cause a denial of service     (out-of-bounds read) by calling the dwarfdump command     on a crafted file.(CVE-2016-8679)

  - The _dwarf_get_abbrev_for_code function in dwarf_util.c     in libdwarf 20161001 and earlier allows remote     attackers to cause a denial of service (out-of-bounds     read) by calling the dwarfdump command on a crafted     file.(CVE-2016-8680)

  - The _dwarf_get_abbrev_for_code function in dwarf_util.c     in libdwarf 20161001 and earlier allows remote     attackers to cause a denial of service (out-of-bounds     read) by calling the dwarfdump command on a crafted     file.(CVE-2016-8681)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of     service (out-of-bounds read) via a crafted object with all-bits on. (CVE-2016-5039)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
94143	Debian DLA-669-1：dwarfutils 安全更新	Nessus	Debian Local Security Checks	2016/10/20	2021/1/11	high
94143	Debian DLA-669-1 : dwarfutils セキュリティ更新	Nessus	Debian Local Security Checks	2016/10/20	2021/1/11	high
94143	Debian DLA-669-1：dwarfutils 安全性更新	Nessus	Debian Local Security Checks	2016/10/20	2021/1/11	high
94143	Debian DLA-669-1 : dwarfutils security update	Nessus	Debian Local Security Checks	2016/10/20	2021/1/11	high
219652	Linux Distros のパッチ未適用の脆弱性: CVE-2016-5039	Nessus	Misc.	2025/3/4	2025/8/24	high
219652	Linux Distros 未修補弱點：CVE-2016-5039	Nessus	Misc.	2025/3/4	2025/8/24	high
219652	Linux Distros 未修补的漏洞: CVE-2016-5039	Nessus	Misc.	2025/3/4	2025/8/24	high
130666	EulerOS 2.0 SP5 : libdwarf (EulerOS-SA-2019-2204)	Nessus	Huawei Local Security Checks	2019/11/8	2024/4/15	high
135527	EulerOS 2.0 SP3 : libdwarf (EulerOS-SA-2020-1398)	Nessus	Huawei Local Security Checks	2020/4/15	2024/3/18	high
219652	Linux Distros Unpatched Vulnerability : CVE-2016-5039	Nessus	Misc.	2025/3/4	2025/8/24	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high