CVE-2018-14015

The vulnerability CVE-2018-14015 affects radare2 (sdb_set_internal in sdb.c, 2.7.0) and is triggered by a crafted ELF file due to missing input validation in r_bin_dwarf_parse_comp_unit (libr/bin/dwarf.c). The issue allows remote attackers to cause a denial of service (invalid read and applicatio...

CVE-2018-14015

The sdbsetinternal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file because of missing input validation in rbindwarfparsecompunit in libr/bin/dwarf.c...