libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section marked NOBITS in an ELF file.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "20120410-2+deb7u2build0.14.04.1", "binary_name": "dwarfdump" }, { "binary_version": "20120410-2+deb7u2build0.14.04.1", "binary_name": "dwarfdump-dbgsym" }, { "binary_version": "20120410-2+deb7u2build0.14.04.1", "binary_name": "libdwarf-dev" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "20120410-2+deb7u2build0.16.04.1", "binary_name": "dwarfdump" }, { "binary_version": "20120410-2+deb7u2build0.16.04.1", "binary_name": "dwarfdump-dbgsym" }, { "binary_version": "20120410-2+deb7u2build0.16.04.1", "binary_name": "libdwarf-dev" } ] }