(1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have unspecified impact via a crafted bit pattern in a signed leb number, aka a "negation overflow."

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - (1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote     attackers to have unspecified impact via a crafted bit pattern in a signed leb number, aka a negation     overflow. (CVE-2016-9558)

Note that Nessus relies on the presence of the package as reported by the vendor.

Christian Rebischke reports :

libdwarf is vulnerable to multiple issues including arbitrary code execution, information disclosure and denial of service.

ID	Name	Product	Family	Severity
220076	Linux Distros Unpatched Vulnerability : CVE-2016-9558	Nessus	Misc.	critical
96368	FreeBSD : libdwarf -- multiple vulnerabilities (83041ca7-d690-11e6-9171-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2016-9558

critical

Tenable Plugins

critical

critical