2 matches found
radare2 denial of service vulnerability (CNVD-2018-13276)
radare2 is a set of libraries and tools for working with binary files. A security vulnerability in the 'rbinjavaannotationnew' function in the shlr/java/class.c file in radare2 version 2.7.0 stems from a lack of input validation in the rbinjavalinenumbertable missing input validation in attrnew. ...
5.5CVSS5.4AI score0.01182EPSS
SaveExploits1References1
PT-2018-12281
Name of the Vulnerable Software and Affected Versions radare2 version 2.7.0 Description The issue is related to a denial of service heap-based buffer over-read and application crash that can be caused by remote attackers via a crafted .class file. This is due to missing input validation in the r...
5.5CVSS0.01189EPSS
SaveExploits3References15
20