2423 matches found
UBUNTU-CVE-2017-9761
The findeoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...
UBUNTU-CVE-2017-9763
The grubext2readblock function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service excessive stack use and application crash via a crafted binary file, related to use of a variable-size stack array...
CVE-2017-9763
The grubext2readblock function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service excessive stack use and application crash via a crafted binary file, related to use of a variable-size stack array...
UBUNTU-CVE-2017-9762
The cmdinfo function in libr/core/cmdinfo.c in radare2 1.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted binary file...
CVE-2017-9762
CVE-2017-9762 affects radare2 1.5.0: the cmd_info function in libr/core/cmd_info.c is vulnerable to a crafted binary input that leads to a use-after-free and application crash (DoS). Connected sources confirm the vulnerability detail; exploitation specifics are not provided. Some sources (e.g., N...
CVE-2017-9763
CVE-2017-9763 affects GNU GRUB (grub_ext2_read_block in fs/ext2.c) used by radare2 1.5.0, where a crafted binary can trigger excessive stack use, causing a denial of service. Root cause is related to a variable-size stack array. Public discussions in multiple sources (SUSE OSV entry and advisorie...
CVE-2017-9761
The findeoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...
CVE-2017-9761
The vulnerability CVE-2017-9761 affects radare2 1.5.0, specifically the find_eoq function in libr/core/cmd.c. A crafted binary can trigger a heap-based out-of-bounds read, leading to an application crash. Exploitation details are not expanded beyond the description; the mode is local (per CVSS) a...
CVE-2017-9763
The grubext2readblock function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service excessive stack use and application crash via a crafted binary file, related to use of a variable-size stack array...
CVE-2017-9762
The cmdinfo function in libr/core/cmdinfo.c in radare2 1.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted binary file...
CVE-2017-9761
The findeoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...
radare2 denial of service vulnerability (CNVD-2017-09352)
radare2 is a set of libraries and tools for working with binary files. A denial of service vulnerability exists in the 'rconfigset' function in the libr/config/config.c file in radare2 version 1.5.0. A remote attacker can exploit this vulnerability to cause a denial of service reuse after release...
CVE-2017-9520
The rconfigset function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted DEX file...
CVE-2017-9520
The rconfigset function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted DEX file...
Design/Logic Flaw
The rconfigset function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted DEX file...
CVE-2017-9520
The rconfigset function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted DEX file...
UBUNTU-CVE-2017-9520
The rconfigset function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted DEX file...
CVE-2017-9520
The CVE-2017-9520 entry describes a denial-of-service vulnerability in radare2 1.5.0, caused by the r_config_set function in libr/config/config.c when processing crafted DEX files. The issue leads to a use-after-free and an application crash. Connected documents corroborate the same description a...
CVE-2017-9520
The rconfigset function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted DEX file...
radare2 denial of service vulnerability (CNVD-2017-07214)
radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'readu32leb128' function in the libr/util/uleb128.c file in radare2 version 1.3.0. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer out-of-bounds...