Heap-based buffer overflow in the _dwarf_skim_forms function in libdwarf/dwarf_macro5.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read).

Update to libdward 20170416

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Christian Rebischke reports :

libdwarf is vulnerable to multiple issues including arbitrary code execution, information disclosure and denial of service.

ID	Name	Product	Family	Severity
101685	Fedora 26 : libdwarf (2017-961cd53028)	Nessus	Fedora Local Security Checks	high
99676	Fedora 25 : libdwarf (2017-15e7445d67)	Nessus	Fedora Local Security Checks	high
96368	FreeBSD : libdwarf -- multiple vulnerabilities (83041ca7-d690-11e6-9171-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2016-9275

high

Tenable Plugins

high

high

critical