Bug 1339931 – CVE-2016-5029 libdwarf: Null pointer dereference in create_fullest_file_path()

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 1339931 - (CVE-2016-5029) CVE-2016-5029 libdwarf: Null pointer dereference in create_fullest_file_path()

Summary:	CVE-2016-5029 libdwarf: Null pointer dereference in create_fullest_file_path()

Status:	NEW

Aliases:	CVE-2016-5029

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	low Severity low
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	impact=low,public=20160522,reported=2...
Keywords:	Security

Depends On:	1340129 1340128
Blocks:
	Show dependency tree / graph

Reported:	2016-05-26 04:36 EDT by Andrej Nemec
Modified:	2016-05-26 09:42 EDT (History)
CC List:	2 users (show)

See Also:
Fixed In Version:
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Andrej Nemec 2016-05-26 04:36:06 EDT

A null pointer dereference vulnerability was found in libdwarf in create_fullest_file_path() function. This is due to corrupted dwarf and the fix detects this corruption and if that null string pointer happens undetected a static string is substituted so readers can notice the situation.

References (with a link to PoC):

http://seclists.org/oss-sec/2016/q2/393

External references:

https://www.prevanders.net/dwarfbug.html

Upstream fix:

https://sourceforge.net/p/libdwarf/code/ci/acae971371daa23a19358bc62204007d258fbc5e

Comment 1 Tom Hughes 2016-05-26 04:36:51 EDT

If you want to report an issue with the Fedora package then please do so against the proper component.

In the meantime please stop adding me to your RedHat internal security bugs.

Comment 2 Andrej Nemec 2016-05-26 09:42:02 EDT

Created libdwarf tracking bugs for this issue:

Affects: fedora-all [bug 1340128]
Affects: epel-6 [bug 1340129]

Note You need to log in before you can comment on or make changes to this bug.