CVE-2017-9998

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-06-28 · updated 2026-06-17
Weakness: CWE-119

Description

The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.

Affected products

Libdwarf Project Libdwarf: from 1999-12-14 through 2017-06-28

References

http://www.securityfocus.com/bid/99310
https://bugzilla.redhat.com/show_bug.cgi?id=1465756
http://www.securityfocus.com/bid/99310
https://bugzilla.redhat.com/show_bug.cgi?id=1465756

Get alerted when CVE-2017-9998 or the next vulnerability affects your stack