PT-2017-17030

Name of the Vulnerable Software and Affected Versions radare2 version 1.2.1 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via a crafted DEX file. This is due to a problem in the dex loadcode function...

radare2 denial of service vulnerability (CNVD-2017-02721)

radare2 is an open source reverse engineering flat. A denial of service vulnerability in the dexparsedebugitem function in libr/bin/p/bindex.c in radare2 version 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted DEX file...

radare2 denial of service vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'rread' function in the libr/include/rendian.h file in radare2 version 1.2.1. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference and...

Debian DLA-837-1 : radare2 security update

CVE-2017-6197 The rread functions in libr/include/rendian.h in radare2 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted binary file, as demonstrated by the rreadle32 function. For Debian 7 'Wheezy', these problems have been...

[SECURITY] [DLA 837-1] radare2 security update

Package : radare2 Version : 0.9-3+deb7u1 CVE ID : CVE-2017-6197 Debian Bug : 856063 CVE-2017-6197 The rread functions in libr/include/rendian.h in radare2 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted binary file, as...

DLA-837-1 radare2 - security update

Bulletin has no description...

CVE-2017-6197

The rread functions in libr/include/rendian.h in radare2 1.2.1 allow remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted binary file, as demonstrated by the rreadle32 function...

UBUNTU-CVE-2017-6197

The rread functions in libr/include/rendian.h in radare2 1.2.1 allow remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted binary file, as demonstrated by the rreadle32 function...

CVE-2017-6197

The rread functions in libr/include/rendian.h in radare2 1.2.1 allow remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted binary file, as demonstrated by the rreadle32 function...

CVE-2017-6197

The rread functions in libr/include/rendian.h in radare2 1.2.1 allow remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted binary file, as demonstrated by the rreadle32 function...

CVE-2017-6197

CVE-2017-6197 affects radare2 1.2.1. The vulnerability is in the r_read_ functions in libr/include/r_endian.h, where crafted binaries can trigger a NULL pointer dereference, causing an application crash (DoS) as demonstrated by r_read_le32. Several connected advisories confirm the issue and note ...

CVE-2017-6197: NULL Pointer Dereference

The rread functions in libr/include/rendian.h in radare2 1.2.1 allow remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted binary file, as demonstrated by the rreadle32 function...

PT-2017-16943

Name of the Vulnerable Software and Affected Versions radare2 version 1.2.1 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted binary file. This is demonstrated by the r read le32 function...

WS-2017-3744

A code injection issue was discovered in radare2 before 1.2.0...

Open Source Malware Clusterization Toolkit: Cosa Nostra

Open Source Malware Clusterization Toolkit Cosa Nostra is an open source software clustering toolkit with a focus on malware analysis. It can create phylogenetic trees of binary malware samples that are structurally similar. It was initially released during SyScan360 Shanghai 2016. Required 3rd...

WS-2016-7069

A code injection issue was discovered in radare2 before 1.1.0...

WS-2016-7067

Format String vulnerability in in radare2 before 0.10.6, allow attackers to execute arbitrary code...

WS-2016-7065

An out of bound read in radare2 before 0.10.5 due to a missing bounds check. Successful exploitation could lead to memory leak...

WS-2016-7066

An uninitialized data exists in radare2 before 0.10.3, which in turn could lead to code execution...

WS-2016-7068

An XSS issue was discovered in radare2 before 0.10.2 due to insufficient sanitization...