2424 matches found
CVE-2019-19590
In radare2 through 4.0, there is an integer overflow for the variable newtokensize in the function rasmmassemble at libr/asm/asm.c. This integer overflow will result in a Use-After-Free for the buffer tokens, which can be filled with arbitrary malicious data after the free. This allows remote...
UBUNTU-CVE-2019-19590
In radare2 through 4.0, there is an integer overflow for the variable newtokensize in the function rasmmassemble at libr/asm/asm.c. This integer overflow will result in a Use-After-Free for the buffer tokens, which can be filled with arbitrary malicious data after the free. This allows remote...
CVE-2019-19590
In radare2 through 4.0, there is an integer overflow for the variable newtokensize in the function rasmmassemble at libr/asm/asm.c. This integer overflow will result in a Use-After-Free for the buffer tokens, which can be filled with arbitrary malicious data after the free. This allows remote...
CVE-2019-19590
In radare2 through 4.0, there is an integer overflow for the variable newtokensize in the function rasmmassemble at libr/asm/asm.c. This integer overflow will result in a Use-After-Free for the buffer tokens, which can be filled with arbitrary malicious data after the free. This allows remote...
CVE-2019-19590
The CVE-2019-19590 issue affects radare2 up to version 4.0, where an integer overflow in r_asm_massemble (libr/asm/asm.c) can trigger a Use-After-Free on token buffers, enabling a remote attacker to cause a crash or potentially execute arbitrary code via crafted input. Mitigation: update radare2 ...
CVE-2019-19590
In radare2 through 4.0, there is an integer overflow for the variable newtokensize in the function rasmmassemble at libr/asm/asm.c. This integer overflow will result in a Use-After-Free for the buffer tokens, which can be filled with arbitrary malicious data after the free. This allows remote...
radare2 integer overflow vulnerability
radare2 is a set of libraries and tools for working with binary files. An integer overflow vulnerability in the newtokensize variable of the rasmmassemble function in libr/asm/asm.c in radare2 4.0 and earlier can be exploited by a remote attacker with specially crafted input to cause a post-relea...
Exploit for Command Injection in Radare Radare2
CVE-2019-14745 weaponized radare2 vulnerability CVE-2019-1474...
radare2:ia_fuzz: Heap-buffer-overflow in read_uleb128
Detailed Report: https://oss-fuzz.com/testcase?key=6048106239492096 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000365f8 Crash State: readuleb128 walkexports getsymbol...
Fedora Update for radare2 FEDORA-2019-65c33bdc2a
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 29 : radare2 (2019-65c33bdc2a)
New build after fixing BuildRequires ---- - Rebase to upstream version 3.9.0 - fix CVE-2019-14745 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
[SECURITY] Fedora 29 Update: radare2-3.9.0-3.fc29.1
The radare2 is a reverse-engineering framework that is multi-architecture, multi-platform, and highly scriptable. Radare2 provides a hexadecimal editor, wrapped I/O, file system support, debugger support, diffing between two functions or binaries, and code analysis at opcode, basic block, and...
radare2:ia_fuzz: Heap-buffer-overflow in walk_exports
Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5767342952284160 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x602000036837...
Fedora 30 : cutter-re / radare2 (2019-b3de19c346)
Rebase radare2 to 3.9.0 - Rebase cutter-re to 1.9.0 - fix CVE-2019-14745 in radare2 on F30 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
[SECURITY] Fedora 30 Update: radare2-3.9.0-1.fc30.1
The radare2 is a reverse-engineering framework that is multi-architecture, multi-platform, and highly scriptable. Radare2 provides a hexadecimal editor, wrapped I/O, file system support, debugger support, diffing between two functions or binaries, and code analysis at opcode, basic block, and...
[SECURITY] Fedora 30 Update: cutter-re-1.9.0-1.fc30
Cutter is a Qt and C++ GUI for radare2. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. Cutter is created by reverse engineers for reverse engineers...
Fedora Update for radare2 FEDORA-2019-b3de19c346
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
radare2:ia_fuzz: Heap-buffer-overflow in r_str_utf8_codepoint
Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=4886464738885632 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60200003fed2...
[SECURITY] Fedora 31 Update: cutter-re-1.9.0-1.fc31
Cutter is a Qt and C++ GUI for radare2. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. Cutter is created by reverse engineers for reverse engineers...
[SECURITY] Fedora 31 Update: radare2-3.9.0-1.fc31.1
The radare2 is a reverse-engineering framework that is multi-architecture, multi-platform, and highly scriptable. Radare2 provides a hexadecimal editor, wrapped I/O, file system support, debugger support, diffing between two functions or binaries, and code analysis at opcode, basic block, and...