Stack overflow

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service stack-based buffer underflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GN...

CVE-2017-9763

CVE-2017-9763 affects GNU GRUB (grub_ext2_read_block in fs/ext2.c) used by radare2 1.5.0, where a crafted binary can trigger excessive stack use, causing a denial of service. Root cause is related to a variable-size stack array. Public discussions in multiple sources (SUSE OSV entry and advisorie...

CVE-2017-9763: Improper Restriction of Operations within the Bounds of a Memory Buffer

The grubext2readblock function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service excessive stack use and application crash via a crafted binary file, related to use of a variable-size stack array...

CVE-2008-3528: Undefined Security Weakness

The error-reporting functionality in 1 fs/ext2/dir.c, 2 fs/ext3/dir.c, and possibly 3 fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a denial of service temporar...