CVE-2018-14015

The sdbsetinternal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file because of missing input validation in rbindwarfparsecompunit in libr/bin/dwarf.c...

CVE-2018-14017

The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...

CVE-2018-14017

The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...

CVE-2018-14017

The CVE-2018-14017 entry affects radare2 (version 2.7.0) specifically the r_bin_java_annotation_new function in shlr/java/class.c. The vulnerability arises from missing input validation in r_bin_java_line_number_table_attr_new, enabling remote attackers to craft a .class file that triggers a heap...

CVE-2018-14015

The vulnerability CVE-2018-14015 affects radare2 (sdb_set_internal in sdb.c, 2.7.0) and is triggered by a crafted ELF file due to missing input validation in r_bin_dwarf_parse_comp_unit (libr/bin/dwarf.c). The issue allows remote attackers to cause a denial of service (invalid read and applicatio...

CVE-2018-14016

The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...

PT-2018-12280

Name of the Vulnerable Software and Affected Versions radare2 version 2.7.0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted Mini Crash Dump file. This is related to the r bin mdmp init...

PT-2018-12279

Name of the Vulnerable Software and Affected Versions radare2 version 2.7.0 Description The issue is related to a denial of service caused by an invalid read and application crash. This occurs when a crafted ELF file is processed due to missing input validation in the r bin dwarf parse comp unit...

PT-2018-12281

Name of the Vulnerable Software and Affected Versions radare2 version 2.7.0 Description The issue is related to a denial of service heap-based buffer over-read and application crash that can be caused by remote attackers via a crafted .class file. This is due to missing input validation in the r...

CVE-2018-14016: Out-of-bounds Read

The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...

CVE-2018-14017: Out-of-bounds Read

The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...

CVE-2018-14015: Improper Restriction of Operations within the Bounds of a Memory Buffer

The sdbsetinternal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file because of missing input validation in rbindwarfparsecompunit in libr/bin/dwarf.c...

radare2 heap out-of-bounds read vulnerability

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A heap out-of-bounds read vulnerability exists in javaswitchop in libr/anal/p/analjava.c in radare2 2.6.0. An...

radare2 memory misreference vulnerability

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A post-release reuse vulnerability exists in ranalbbfree in libr/anal/bb.c in radare2 2.6.0. An attacker can...

radare2 heap out-of-bounds read vulnerability (CNVD-2018-12207)

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A heap out-of-bounds read vulnerability exists in 6502op in libr/anal/p/anal6502.c in radare2 2.6.0. An attacke...

CVE-2018-12322

There is a heap out of bounds read in radare2 2.6.0 in 6502op in libr/anal/p/anal6502.c via a crafted iNES ROM binary file...

CVE-2018-12320

There is a use after free in radare2 2.6.0 in ranalbbfree in libr/anal/bb.c via a crafted Java binary file...

CVE-2018-12321

There is a heap out of bounds read in radare2 2.6.0 in javaswitchop in libr/anal/p/analjava.c via a crafted Java binary file...

CVE-2018-12322

There is a heap out of bounds read in radare2 2.6.0 in 6502op in libr/anal/p/anal6502.c via a crafted iNES ROM binary file...

CVE-2018-12320

There is a use after free in radare2 2.6.0 in ranalbbfree in libr/anal/bb.c via a crafted Java binary file...