WS-2017-3743

Radare2 before 1.6.0 has a command injection vulnerability...

PT-2017-18987

Name of the Vulnerable Software and Affected Versions radare2 version 1.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a use-after-free and application crash, via a crafted DEX file. This is due to a problem in the r config set function. Recommendatio...

CVE-2017-9520: Use After Free

The rconfigset function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted DEX file...

radare2 denial of service vulnerability (CNVD-2017-07214)

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'readu32leb128' function in the libr/util/uleb128.c file in radare2 version 1.3.0. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer out-of-bounds...

radare2 buffer overflow vulnerability (CNVD-2017-07168)

radare2 is a set of libraries and tools for working with binary files. A buffer overflow vulnerability exists in the 'consumeinitexpr' function of the wasm.c file in radare2 version 1.3.0. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer out-of-bounds read...

radare2 'get_relocs_64' function denial of service vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'getrelocs64' function in the libr/bin/format/mach0/mach0.c file in radare2 version 1.3.0. A remote attacker can exploit this vulnerability to cause a denial of service reuse after releas...

CVE-2017-7946

The getrelocs64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted Mach0 file...

UBUNTU-CVE-2017-7946

The getrelocs64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted Mach0 file...

CVE-2017-7946

The getrelocs64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted Mach0 file...

CVE-2017-7946

The getrelocs64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted Mach0 file...

CVE-2017-7946

The getrelocs64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted Mach0 file...

CVE-2017-7946

The getrelocs64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted Mach0 file...

CVE-2017-7946

The vulnerability CVE-2017-7946 affects radare2 1.3.0, specifically the get_relocs_64 function in libr/bin/format/mach0/mach0.c. A crafted Mach0 file can trigger a denial of service via a use-after-free, leading to an application crash. This is the only detail provided across connected records: n...

CVE-2017-7946: Use After Free

The getrelocs64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted Mach0 file...

PT-2017-18019

Name of the Vulnerable Software and Affected Versions radare2 version 1.3.0 Description The issue allows remote attackers to cause a denial of service, resulting in a use-after-free and application crash, via a crafted Mach0 file. This is due to a problem in the get relocs 64 function in...

Debian DLA-901-1 : radare2 security update

CVE-2017-6448 The dalvikdisassemble function in libr/asm/p/asmdalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted DEX file. For Debian 7 'Wheezy', these problems ha...

[SECURITY] [DLA 901-1] radare2 security update

Package : radare2 Version : 0.9-3+deb7u2 CVE ID : CVE-2017-6448 CVE-2017-6448 The dalvikdisassemble function in libr/asm/p/asmdalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact...

DLA-901-1 radare2 - security update

Bulletin has no description...

CVE-2017-7854

The consumeinitexpr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Web Assembly file...

CVE-2017-7854

The consumeinitexpr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Web Assembly file...