What’s Vulnerable › Vulnerabilities

CVE-2015-8750

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-02-13 · updated 2026-06-17
• Weakness: CWE-476

Description

libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section marked NOBITS in an ELF file.

Affected products

• Libdwarf Project Libdwarf: from 1999-12-14 through 2015-11-14

References

• http://www.openwall.com/lists/oss-security/2016/01/07/11
• https://bugzilla.redhat.com/show_bug.cgi?id=1294264
• https://github.com/tomhughes/libdwarf/commit/11750a2838e52953013e3114ef27b3c7b1780697
• http://www.openwall.com/lists/oss-security/2016/01/07/11
• https://bugzilla.redhat.com/show_bug.cgi?id=1294264
• https://github.com/tomhughes/libdwarf/commit/11750a2838e52953013e3114ef27b3c7b1780697

Get alerted when CVE-2015-8750 or the next vulnerability affects your stack