CVE-2018-11380

CVE-2018-11380 affects radare2 2.5.0, where parse_import_ptr() can be triggered by a crafted Mach-O file to cause a heap-based out-of-bounds read and application crash (denial of service). The issue is tied to parsing Mach-O inputs in radare2. Affected component: parse_import_ptr() in radare2 2.5...

CVE-2018-11380

The parseimportptr function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted Mach-O file...

CVE-2018-11375

The instlds function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11377

The avropanalyze function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11379

The getdebuginfo function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted PE file...

CVE-2018-11376

The rreadle32 function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted ELF file...

CVE-2018-11381

The stringscanrange function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11380

The parseimportptr function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted Mach-O file...

CVE-2018-11382

The inststs function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11383

The rstrbuffini function in radare2 2.5.0 allows remote attackers to cause a denial of service invalid free and application crash via a crafted ELF file because of an uninitialized variable in the CPSE handler in libr/anal/p/analavr.c...

CVE-2018-11384

The shop function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted ELF file...

CVE-2018-11377

The CVE-2018-11377 issue affects radare2 (v2.5.0) where the avr_op_analyze() function can be exploited by a crafted binary to trigger a heap-based out-of-bounds read and crash the application, i.e., a remote denial of service. This denial of service is described in multiple sources (NVD/Nessus/OS...

CVE-2018-11376

The rreadle32 function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted ELF file...

CVE-2018-11375

Radare2 2.5.0 contains a denial-of-service vulnerability in the _inst__lds() function that can be triggered by a crafted binary file, causing a heap-based out-of-bounds read and application crash. The issue is remote (via crafted binaries) and has been addressed upstream; Arch Linux notes the fix...

CVE-2018-11376

CVE-2018-11376 affects radare2 version 2.5.0, where the r_read_le32() function can be exploited via a crafted ELF file to trigger a heap-based out-of-bounds read and application crash (remote denial of service). Multiple connected advisories confirm the same root cause and impact. Mitigation in t...

CVE-2018-11384

The shop function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted ELF file...

CVE-2018-11383

CVE-2018-11383 affects radare2 up to version 2.5.0, where the r_strbuf_fini() function may crash the application or cause an invalid free via a crafted ELF file due to an uninitialized variable in the CPSE handler in libr/anal/p/anal_avr.c. The vulnerability is confirmed across multiple sources; ...

CVE-2018-11383

The rstrbuffini function in radare2 2.5.0 allows remote attackers to cause a denial of service invalid free and application crash via a crafted ELF file because of an uninitialized variable in the CPSE handler in libr/anal/p/analavr.c...

CVE-2018-11382

The inststs function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11379

CVE-2018-11379 affects radare2. In radare2 version 2.5.0, the get_debug_info() function can be triggered by a crafted PE file to cause a heap-based out-of-bounds read and application crash (denial of service). This is documented across multiple connected sources (Arch Linux ASA-201806-2 notes the...