radare2 denial of service vulnerability (CNVD-2017-36110)

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the libr/bin/dwarf.c file in radare2 version 2.0.1. A remote attacker can exploit this vulnerability to cause a denial of service invalid read and application crash with the help of a special...

UBUNTU-CVE-2017-16805

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

Design/Logic Flaw

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

CVE-2017-16805

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

CVE-2017-16805

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

CVE-2017-16805

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

CVE-2017-16805

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

CVE-2017-16805

radare2 2.0.1 is affected by CVE-2017-16805 due to a flaw in libr/bin/dwarf.c (r_bin_dwarf_parse_comp_unit) and sdb_set_internal in shlr/sdb/src/sdb.c that allows remote attackers to trigger an invalid read and crash the application via a crafted ELF file. Impact is denial of service; no patch/ve...

CVE-2017-16805

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

CVE-2017-16805: Out-of-bounds Read

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

PT-2017-14574

Name of the Vulnerable Software and Affected Versions radare2 version 2.0.1 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid read and application crash, by providing a crafted ELF file. This is related to the r bin dwarf parse comp unit function ...

UBUNTU-CVE-2017-16358

In radare 2.0.1, an out-of-bounds read vulnerability exists in stringscanrange in libr/bin/bin.c when doing a string search...

UBUNTU-CVE-2017-16359

In radare 2.0.1, a pointer wraparound vulnerability exists in storeversioninfognuverdef in libr/bin/format/elf/elf.c...

PT-2017-14370

Name of the Vulnerable Software and Affected Versions radare2 version 2.0.1 Description A memory corruption issue exists due to improper sh size validation when allocating memory. This is demonstrated by an invalid free in the store versioninfo gnu verdef and store versioninfo gnu verneed functio...

PT-2017-14371

Name of the Vulnerable Software and Affected Versions radare2 version 2.0.1 Description An out-of-bounds read issue exists in the string scan range function in libr/bin/bin.c when performing a string search. Recommendations For radare2 version 2.0.1, at the moment, there is no information about a...

PT-2017-14372

Name of the Vulnerable Software and Affected Versions radare2 version 2.0.1 Description A pointer wraparound issue exists in the store versioninfo gnu verdef function in libr/bin/format/elf/elf.c. Recommendations For radare2 version 2.0.1, consider updating to a newer version that contains a fix...

radare2 denial of service vulnerability (CNVD-2017-36083)

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'storeversioninfognuverdef' function in the libr/bin/format/elf/elf.c file in radare2 version 2.0.1. The vulnerability can be exploited to cause a denial of service out-of-bounds read wit...

radare2 denial of service vulnerability (CNVD-2017-36084)

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'storeversioninfognuverneed' function in the libr/bin/format/elf/elf.c file in radare2 version 2.0.1. A remote attacker can exploit this vulnerability to cause a denial of service...

Integer overflow

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverdef in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems...

Integer overflow

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverneed in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems...