PT-2018-10536

Name of the Vulnerable Software and Affected Versions radare2 version 2.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based out-of-bounds read and application crash, via a crafted PE file. This is due to a problem in the get debug info functio...

PT-2018-10538

Name of the Vulnerable Software and Affected Versions radare2 version 2.5.0 Description The issue concerns a denial of service caused by a heap-based out-of-bounds read and application crash. This can be triggered by remote attackers via a crafted binary file, specifically exploiting the string...

PT-2018-10537

Name of the Vulnerable Software and Affected Versions radare2 version 2.5.0 Description The issue concerns a denial of service caused by a heap-based out-of-bounds read and application crash. This can be triggered by remote attackers via a crafted Mach-O file, specifically affecting the parse...

PT-2018-10532

Name of the Vulnerable Software and Affected Versions radare2 version 2.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based out-of-bounds read and application crash, via a crafted binary file. This is due to a problem in the lds function...

PT-2018-10533

Name of the Vulnerable Software and Affected Versions radare2 version 2.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based out-of-bounds read and application crash, via a crafted ELF file. This is due to a problem in the r read le32 function...

CVE-2018-11381: Out-of-bounds Read

The stringscanrange function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11377: Out-of-bounds Read

The avropanalyze function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11376: Out-of-bounds Read

The rreadle32 function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted ELF file...

CVE-2018-11380: Out-of-bounds Read

The parseimportptr function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted Mach-O file...

CVE-2018-11375: Out-of-bounds Read

The instlds function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

PT-2018-10534

Name of the Vulnerable Software and Affected Versions radare2 version 2.5.0 Description The issue concerns a denial of service caused by a heap-based out-of-bounds read and application crash. This can be triggered by remote attackers via a crafted binary file, specifically affecting the avr op...

PT-2018-10539

Name of the Vulnerable Software and Affected Versions radare2 version 2.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based out-of-bounds read and application crash, via a crafted binary file. This is due to a problem in the inst sts function...

PT-2018-10540

Name of the Vulnerable Software and Affected Versions radare2 version 2.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid free and application crash, via a crafted ELF file. This is due to an uninitialized variable in the CPSE handler in...

CVE-2018-11382: Out-of-bounds Read

The inststs function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

radare2 buffer overflow vulnerability (CNVD-2018-09699)

radare2 is a set of libraries and tools for working with binary files. A heap buffer out-of-bounds read vulnerability exists in the 'rhexbin2str' function libr/util/hex.c file in radare2 version 2.5.0. A remote attacker can exploit this vulnerability to cause a denial of service with a specially...

radare2 buffer overflow vulnerability (CNVD-2018-09700)

radare2 is a set of libraries and tools for working with binary files. A heap buffer out-of-bounds read vulnerability exists in the 'dalvikop' function libr/anal/p/analdalvik.c file in radare2 version 2.5.0. A remote attacker can exploit this vulnerability to cause a denial of service via a...

UBUNTU-CVE-2018-10186

In radare2 2.5.0, there is a heap-based buffer over-read in the rhexbin2str function libr/util/hex.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. This issue is different from CVE-2017-15368...

CVE-2018-10187

In radare2 2.5.0, there is a heap-based buffer over-read in the dalvikop function libr/anal/p/analdalvik.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. Note that this issue is different from CVE-2018-8809, which was patched earlier...

CVE-2018-10186

In radare2 2.5.0, there is a heap-based buffer over-read in the rhexbin2str function libr/util/hex.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. This issue is different from CVE-2017-15368...

CVE-2018-10186

In radare2 2.5.0, there is a heap-based buffer over-read in the rhexbin2str function libr/util/hex.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. This issue is different from CVE-2017-15368...