CVE-2017-6387

CVE-2017-6387 affects radare2 version 1.2.1; the dex_loadcode function in libr/bin/p/bin_dex.c allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DEX file. No further exploit details or patches are provided in the connected documents.

CVE-2017-6415

The CVE-2017-6415 issue affects radare2 (v1.2.1) where the dex_parse_debug_item function in libr/bin/p/bin_dex.c can be triggered by a crafted DEX file to cause a NULL pointer dereference and application crash (DoS). The connected sources consistently describe the vulnerable component and impact;...

CVE-2017-6415

The dexparsedebugitem function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted DEX file...

CVE-2017-6319

The dexparsedebugitem function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted DEX file...

CVE-2017-6387

The dexloadcode function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted DEX file...

CVE-2017-6415

The dexparsedebugitem function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted DEX file...

CVE-2017-6319

The dexparsedebugitem function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted DEX file...

CVE-2017-6387

The dexloadcode function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted DEX file...

CVE-2017-6319

The vulnerability CVE-2017-6319 affects radare2, specifically the dex_parse_debug_item function in libr/bin/p/bin_dex.c within version 1.2.1. A crafted DEX file can trigger a denial of service (buffer overflow and application crash) and may have unspecified impact. The connected sources consisten...

radare2 denial of service vulnerability (CNVD-2017-02720)

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'dexloadcode' function in the libr/bin/p/bindex.c file in radare2 version 1.2.1. A remote attacker can exploit this vulnerability to cause a denial of service out-of-bounds read and...

radare2 denial of service vulnerability (CNVD-2017-02721)

radare2 is an open source reverse engineering flat. A denial of service vulnerability in the dexparsedebugitem function in libr/bin/p/bindex.c in radare2 version 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted DEX file...

radare2 denial of service vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'dexparsedebugitem' function in the libr/bin/p/bindex.c file in radare2 version 1.2.1. A remote attacker can exploit this vulnerability to cause a denial of service null pointer...

radare2 denial of service vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'rread' function in the libr/include/rendian.h file in radare2 version 1.2.1. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference and...

Debian DLA-837-1 : radare2 security update

CVE-2017-6197 The rread functions in libr/include/rendian.h in radare2 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted binary file, as demonstrated by the rreadle32 function. For Debian 7 'Wheezy', these problems have been...

[SECURITY] [DLA 837-1] radare2 security update

Package : radare2 Version : 0.9-3+deb7u1 CVE ID : CVE-2017-6197 Debian Bug : 856063 CVE-2017-6197 The rread functions in libr/include/rendian.h in radare2 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted binary file, as...

DLA-837-1 radare2 - security update

Bulletin has no description...

UBUNTU-CVE-2017-6197

The rread functions in libr/include/rendian.h in radare2 1.2.1 allow remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted binary file, as demonstrated by the rreadle32 function...

CVE-2017-6197

The rread functions in libr/include/rendian.h in radare2 1.2.1 allow remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted binary file, as demonstrated by the rreadle32 function...

CVE-2017-6197

CVE-2017-6197 affects radare2 1.2.1. The vulnerability is in the r_read_ functions in libr/include/r_endian.h, where crafted binaries can trigger a NULL pointer dereference, causing an application crash (DoS) as demonstrated by r_read_le32. Several connected advisories confirm the issue and note ...

CVE-2017-6197

The rread functions in libr/include/rendian.h in radare2 1.2.1 allow remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted binary file, as demonstrated by the rreadle32 function...