CVE-2019-14745

In radare2 before 3.7.0, a command injection vulnerability exists in binsymbols in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of symbol names embedded in...

CVE-2019-14745

In radare2 before 3.7.0, a command injection vulnerability exists in binsymbols in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of symbol names embedded in...

PT-2019-13812 · Radare2 +1 · Radare2 +1

Name of the Vulnerable Software and Affected Versions: radare2 versions prior to 3.7.0 Description: A command injection issue exists due to improper handling of symbol names embedded in executables. This allows for the execution of arbitrary shell commands with the permissions of the victim by...

Fedora Update for radare2 FEDORA-2019-2a16e1ab93

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: cutter-re-1.8.3-1.fc30

Cutter is a Qt and C++ GUI for radare2. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. Cutter is created by reverse engineers for reverse engineers...

[SECURITY] Fedora 30 Update: radare2-3.6.0-1.fc30

The radare2 is a reverse-engineering framework that is multi-architecture, multi-platform, and highly scriptable. Radare2 provides a hexadecimal editor, wrapped I/O, file system support, debugger support, diffing between two functions or binaries, and code analysis at opcode, basic block, and...

Fedora Update for radare2 FEDORA-2019-e612286002

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: radare2-3.6.0-1.fc29

The radare2 is a reverse-engineering framework that is multi-architecture, multi-platform, and highly scriptable. Radare2 provides a hexadecimal editor, wrapped I/O, file system support, debugger support, diffing between two functions or binaries, and code analysis at opcode, basic block, and...

Fedora 29 : radare2 (2019-e612286002)

Rebase to radare2 3.6.0 and fixes CVE-2019-12790 and CVE-2019-12802 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

radare2/ia_fuzz: Stack-buffer-overflow in string_scan_range

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5638315212013568 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

CVE-2019-12865

In radare2 through 3.5.1, cmdmount in libr/core/cmdmount.c has a double free for the ms command...

CVE-2019-12865

In radare2 through 3.5.1, cmdmount in libr/core/cmdmount.c has a double free for the ms command...

CVE-2019-12865

In radare2 through 3.5.1, cmdmount in libr/core/cmdmount.c has a double free for the ms command...

Double free

In radare2 through 3.5.1, cmdmount in libr/core/cmdmount.c has a double free for the ms command...

UBUNTU-CVE-2019-12865

In radare2 through 3.5.1, cmdmount in libr/core/cmdmount.c has a double free for the ms command...

CVE-2019-12865

CVE-2019-12865 affects radare2 up to version 3.5.1, where cmd_mount in libr/core/cmd_mount.c has a double free vulnerability. Connected advisories confirm fixes: Fedora update to radare2 3.6.0 (and cutter-re 1.8.3) and Mageia fix completing to radare2 3.9.0 with related CVEs (including CVE-2019-1...

CVE-2019-12865

In radare2 through 3.5.1, cmdmount in libr/core/cmdmount.c has a double free for the ms command...

CVE-2019-12865

In radare2 through 3.5.1, cmdmount in libr/core/cmdmount.c has a double free for the ms command...

CVE-2019-12865

In radare2 through 3.5.1, cmdmount in libr/core/cmdmount.c has a double free for the ms command...

radare2 denial of service vulnerability (CNVD-2019-18609)

radare2 is a set of libraries and tools for working with binary files. A buffer error vulnerability exists in radare2 3.5.1 and prior versions. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in...