CVE-2018-8809

CVE-2018-8809 affects radare2, reported for 2.4.0, featuring a heap-based buffer over-read in the dalvik_op function (anal_dalvik.c). The vulnerability can be exploited by remote attackers to cause a denial of service through a crafted DEX file. Multiple connected sources corroborate the same fla...

CVE-2018-8810

In radare2 2.4.0, there is a heap-based buffer over-read in the getivarlistt function of mach0classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file...

CVE-2018-8809

In radare2 2.4.0, there is a heap-based buffer over-read in the dalvikop function of analdalvik.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file...

CVE-2018-8810

In radare2 2.4.0, there is a heap-based buffer over-read in the getivarlistt function of mach0classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file...

CVE-2018-8808

In radare2 2.4.0, there is a heap-based buffer over-read in the rasmdisassemble function of asm.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file...

radare2 'get_ivar_list_t' function heap buffer overflow vulnerability

radare2 is a set of libraries and tools for working with binary files. A heap buffer overflow vulnerability exists in the 'getivarlistt' function of the mach0classes.c file in radare2 version 2.4.0. A remote attacker can exploit this vulnerability to cause a denial of service with the help of a...

radare2 'r_asm_disassemble' function heap buffer overflow vulnerability

radare2 is a set of libraries and tools for working with binary files. A heap buffer overflow vulnerability exists in the 'rasmdisassemble' function of the asm.c file in radare2 version 2.4.0. A remote attacker can exploit this vulnerability to cause a denial of service with a specially crafted d...

radare2 'dalvik_op' function heap buffer overflow vulnerability

radare2 is a set of libraries and tools for working with binary files. A heap buffer overflow vulnerability exists in the 'dalvikop' function of the analdalvik.c file in radare2 version 2.4.0. A remote attacker can exploit this vulnerability to cause a denial of service with the help of a special...

Debian: Security Advisory (DLA-1016-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-901-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-837-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Qt C++ radare2 GUI: Cutter

A Qt and C++ GUI for radare2 reverse engineering framework originally named Iaito. Cutter is not aimed at existing radare2 users. It instead focuses on those whose are not yet radare2 users because of the learning curve, because they don’t like CLI applications or because of the...

radare2 denial of service vulnerability (CNVD-2017-36110)

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the libr/bin/dwarf.c file in radare2 version 2.0.1. A remote attacker can exploit this vulnerability to cause a denial of service invalid read and application crash with the help of a special...

Design/Logic Flaw

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

CVE-2017-16805

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

CVE-2017-16805

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

UBUNTU-CVE-2017-16805

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

CVE-2017-16805

radare2 2.0.1 is affected by CVE-2017-16805 due to a flaw in libr/bin/dwarf.c (r_bin_dwarf_parse_comp_unit) and sdb_set_internal in shlr/sdb/src/sdb.c that allows remote attackers to trigger an invalid read and crash the application via a crafted ELF file. Impact is denial of service; no patch/ve...

CVE-2017-16805

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

CVE-2017-16805

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...