Mageia: Security Advisory (MGASA-2020-0024)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for cutter-re FEDORA-2019-e931422a81

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Exploit for Command Injection in Radare Radare2

CVE-2019-14745 weaponized radare2 vulnerability CVE-2019-1474...

Fedora Update for radare2 FEDORA-2019-65c33bdc2a

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 29 : radare2 (2019-65c33bdc2a)

New build after fixing BuildRequires ---- - Rebase to upstream version 3.9.0 - fix CVE-2019-14745 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 30 : cutter-re / radare2 (2019-b3de19c346)

Rebase radare2 to 3.9.0 - Rebase cutter-re to 1.9.0 - fix CVE-2019-14745 in radare2 on F30 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 31 : cutter-re / radare2 (2019-e931422a81)

Rebase radare2 to 3.9.0 - Rebase cutter-re to 1.9.0 - Fix CVE-2019-14745 in radare2 on F31 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Command injection

In radare2 before 3.9.0, a command injection vulnerability exists in binsymbols in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to an insufficient fix for CVE-2019-14745 and...

CVE-2019-14745

In radare2 before 3.7.0, a command injection vulnerability exists in binsymbols in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of symbol names embedded in...

CVE-2019-14745

Radare2 CVE-2019-14745 is a command-injection flaw in bin_symbols() (libr/core/cbin.c) present in versions before 3.7.0, due to improper handling of symbol names embedded in executables. By feeding a crafted binary, an attacker could execute arbitrary shell commands with the victim’s privileges. ...