CVE-2024-11858

A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing​...

CVE-2024-11858

A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing​...

UBUNTU-CVE-2024-11858

A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing​...

CVE-2024-11858

CVE-2024-11858 affects Radare2. Affected: Radare2 up to and including version 5.9.x (per sources noting 5.9.8 and earlier; Nessus/Tenable references RS 5.8.0–5.9.4). The root cause is insufficient input validation when handling Pebble Application files, allowing malicious inputs to inject shell c...

CVE-2024-11858 Radare2: command injection via pebble application files in radare2

A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing​...

CVE-2024-11858 Radare2: command injection via pebble application files in radare2

A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing​...

CVE-2024-11858 Radare2: command injection via pebble application files in radare2

A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing​...

CVE-2024-11858

A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing​...

PT-2024-17298 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: Radare2 affected versions not specified Description: A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can...

radare2 安全漏洞

radare2 is the radare open source set of libraries and tools for working with binary files. A security vulnerability exists in radare2 version 5.9.8 and earlier, which stems from insufficient input validation when processing Pebble Application files, making it susceptible to a command injection...

[SECURITY] Fedora 40 Update: iaito-5.9.9-2.fc40

iaito is a Qt and C++ GUI for radare2. It is the continuation of Cutter before the fork to keep radare2 as backend. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. The iaito is created by reverse engineers for reverse...

[SECURITY] Fedora 41 Update: iaito-5.9.9-2.fc41

iaito is a Qt and C++ GUI for radare2. It is the continuation of Cutter before the fork to keep radare2 as backend. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. The iaito is created by reverse engineers for reverse...

[SECURITY] Fedora 41 Update: radare2-5.9.8-4.fc41

The radare2 is a reverse-engineering framework that is multi-architecture, multi-platform, and highly scriptable. Radare2 provides a hexadecimal editor, wrapped I/O, file system support, debugger support, diffing between two functions or binaries, and code analysis at opcode, basic block, and...

radare2-5.9.8-1.1 on GA media (moderate)

radare2-5.9.8-1.1 on GA media Announcement ID: openSUSE-SU-2024:14569-1 Rating: moderate Cross-References: CVE-2024-29645 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the radare2-5.9.8-1.1...

Fedora 41 : iaito / radare2 (2024-ac8d48e58a)

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-ac8d48e58a advisory. Bump radare2 to 5.9.8, iaito to 5.9.9, fixes CVE-2024-11858 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 40 : iaito / radare2 (2024-d4d1e89e61)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-d4d1e89e61 advisory. Bump radare2 to 5.9.8, iaito to 5.9.9, fixes CVE-2024-11858 Tenable has extracted the preceding description block directly from the Fedora security...

OPENSUSE-SU-2024:14569-1 radare2-5.9.8-1.1 on GA media

These are all security issues fixed in the radare2-5.9.8-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 15 Security Update : radare2 (openSUSE-SU-2024:0396-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0396-1 advisory. Update to version 5.9.8: - CVE-2024-29645: buffer overflow vulnerability allows an attacker to execute arbitrary code via the parsedie function boo123406...

openSUSE 15 Security Update : radare2 (openSUSE-SU-2024:0397-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0397-1 advisory. Update to version 5.9.8: - CVE-2024-29645: buffer overflow vulnerability allows an attacker to execute arbitrary code via the parsedie function boo123406...

openSUSE Security Advisory (openSUSE-SU-2024:0396-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...