Skip to main content

Libiberty CVE-2016-4487

MEDIUM
Use After Free (CWE-416)
2017-02-24 cve@mitre.org
Denial Of Service Memory Corruption Use After Free Libiberty
5.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Feb 24, 2017 - 20:59 cve.org
MEDIUM 5.5

DescriptionCVE.org

Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "btypevec."

AnalysisAI

Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "btypevec.". Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Use After Free (CWE-416), which allows attackers to access freed memory to execute arbitrary code or crash the application. Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "btypevec." Affected products include: Gnu Libiberty.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use smart pointers or garbage-collected languages. Set pointers to NULL after freeing. Enable memory sanitizers.

More in Libiberty

View all
CVE-2016-2226 HIGH POC
7.8 Feb 24

Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary
CVE-2016-6131 HIGH
7.5 Feb 07

The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and

CVE-2016-4490 MEDIUM
5.5 Feb 24

Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault

CVE-2016-4491 MEDIUM
5.5 Feb 24

The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentati
CVE-2016-4493 MEDIUM
5.5 Feb 24

The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attack
CVE-2016-4489 MEDIUM
5.5 Feb 24

Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmenta
CVE-2016-4488 MEDIUM
5.5 Feb 24

Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and c
CVE-2012-3509 MEDIUM
5.0 Sep 05

Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/obj
CVE-2016-4492 MEDIUM
4.4 Feb 24

Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service

Same weakness CWE-416 – Use After Free

View all
CVE-2019-0708 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2014-0322 HIGH POC
8.8
CVE-2012-4792 HIGH POC
8.8
CVE-2009-4324 HIGH POC
7.8
CVE-2015-0313 CRITICAL POC
9.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2013-2551 HIGH POC
8.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2016-4487 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy