CVE-2018-11377

The avropanalyze function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

Heap overflow

The inststs function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11382

The inststs function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11375

The instlds function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

UBUNTU-CVE-2018-11377

The avropanalyze function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11379

The getdebuginfo function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted PE file...

CVE-2018-11375

The instlds function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11376

The rreadle32 function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted ELF file...

UBUNTU-CVE-2018-11380

The parseimportptr function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted Mach-O file...

UBUNTU-CVE-2018-11379

The getdebuginfo function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted PE file...

UBUNTU-CVE-2018-11384

The shop function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted ELF file...

CVE-2018-11377

The avropanalyze function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

UBUNTU-CVE-2018-11376

The rreadle32 function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted ELF file...

UBUNTU-CVE-2018-11383

The rstrbuffini function in radare2 2.5.0 allows remote attackers to cause a denial of service invalid free and application crash via a crafted ELF file because of an uninitialized variable in the CPSE handler in libr/anal/p/analavr.c...

CVE-2018-11384

The supplied documents identify CVE-2018-11384 in radare2 , where the sh_op() function can be triggered by a crafted ELF file to cause a heap-based out-of-bounds read and a crash. The vulnerability is described as allowing a remote attacker to cause a denial of service. Multiple connected sources...

CVE-2018-11382

CVE-2018-11382 affects radare2 (v2.5.0) and is caused by the _inst__sts() function, which allows remote attackers to trigger a heap-based out-of-bounds read, leading to an application crash (denial of service) via a crafted binary. Impact is limited to the described crash/DoS and, per the Arch Li...

CVE-2018-11377

The avropanalyze function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11381

The stringscanrange function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11379

The getdebuginfo function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted PE file...

CVE-2018-11381

The CVE-2018-11381 issue affects radare2 (v2.5.0). The string_scan_range() function can be triggered by a crafted binary to cause a heap-based out-of-bounds read and application crash, constituting a denial of service. Several connected sources corroborate the vulnerability in radare2 2.5.0 and d...