CVE-2020-15121

2020-07-2018:15:00

Alpine Linux Development Team

security.alpinelinux.org

0.012 Low

EPSS

Percentile

84.8%

JSON

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it’s required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current directory.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchradare2< 4.5.0-r0UNKNOWN
Alpine3.12-communitynoarchradare2< 4.5.0-r0UNKNOWN
Alpine3.13-communitynoarchradare2< 4.5.0-r0UNKNOWN
Alpine3.14-communitynoarchradare2< 4.5.0-r0UNKNOWN
Alpine3.15-communitynoarchradare2< 4.5.0-r0UNKNOWN
Alpine3.16-communitynoarchradare2< 4.5.0-r0UNKNOWN
Alpine3.17-communitynoarchradare2< 4.5.0-r0UNKNOWN
Alpine3.18-communitynoarchradare2< 4.5.0-r0UNKNOWN
Alpine3.19-communitynoarchradare2< 4.5.0-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	radare2	< 4.5.0-r0	UNKNOWN
Alpine	3.12-community	noarch	radare2	< 4.5.0-r0	UNKNOWN
Alpine	3.13-community	noarch	radare2	< 4.5.0-r0	UNKNOWN
Alpine	3.14-community	noarch	radare2	< 4.5.0-r0	UNKNOWN
Alpine	3.15-community	noarch	radare2	< 4.5.0-r0	UNKNOWN
Alpine	3.16-community	noarch	radare2	< 4.5.0-r0	UNKNOWN
Alpine	3.17-community	noarch	radare2	< 4.5.0-r0	UNKNOWN
Alpine	3.18-community	noarch	radare2	< 4.5.0-r0	UNKNOWN
Alpine	3.19-community	noarch	radare2	< 4.5.0-r0	UNKNOWN

0.012 Low

EPSS

Percentile

84.8%

JSON

Related for ALPINE:CVE-2020-15121