Directory traversal

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

CVE-2020-15121

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

CVE-2020-15121

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

CVE-2020-15121

CVE-2020-15121 affects radare2 prior to version 4.5.0. Malformed PDB file names in the PDB server path enable a shell injection when a user opens an executable in radare2 and runs idpd to trigger the download; the shell code can run and create a file named pwned in the current directory. Remediat...

CVE-2020-15121

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

CVE-2020-15121 Command injection in Radare2

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

CVE-2020-15121

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

PT-2022-8867 · Radare2 +1 · Radare2 +1

Name of the Vulnerable Software and Affected Versions: radare2 affected versions not specified Description: A flaw was found in radare2 due to a mismatched array length in core java.c, which could allow an attacker to cause a crash and perform a denial of service attack. Recommendations: At the...

PT-2022-8868 · Radare2 +1 · Radare2 +1

Name of the Vulnerable Software and Affected Versions: radare2 affected versions not specified Description: A double free issue was discovered in the cmd info function, located in cmd info.c. This issue could potentially allow modification of unexpected memory locations, leading to a crash...

PT-2022-8869 · Radare2 +1 · Radare2 +1

Name of the Vulnerable Software and Affected Versions: radare2 affected versions not specified Description: A segmentation fault was discovered in radare2 when using the adf command with no or incorrect arguments. This issue arises from the anal fcn data function in libr/core/cmd anal.c, where r...

radare2:ia_fuzz: Segv on unknown address in pvector_free_elem

Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=4916198700744704 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. A heap-based buffer over-read in the regglangparsechar function in egglang.c due to lack of input length validation, allows a remote attacker to crash the application, or potentially execute arbitrary code in the system...

Command Injection

radare2 is vulnerable to command injection. A command injection vulnerability exists in the function binsymbols in libr/core/cbin.c. An attacker is able to execute arbitrary shell commands using a malicious executable file due to improper handling of symbol names embedded in executables...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service DoS. The vulnerability exists in cmdmount in libr/core/cmdmount.c has a double free for the ms command...

Denial Of Service (DoS)

radare2 through 3.5.1 mishandles the RParse API, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact, as demonstrated by newstr buffer overflows during replace operations. This affects libr/asm/asm.c and libr/parse/parse.c...

radare2:ia_fuzz: Heap-buffer-overflow in populate_relocs_record

Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5680322902753280 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x61100000604...

radare2:ia_fuzz: Heap-buffer-overflow in populate_relocs_record

Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5660993603764224 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x61c0000127a...

radare2:ia_fuzz: Heap-buffer-overflow in populate_relocs_record

Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5729028771414016 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x61a0000179e...

radare2:ia_fuzz: Heap-buffer-overflow in populate_relocs_record

Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5718918753943552 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x6140000013f...

radare2:ia_fuzz: Heap-buffer-overflow in r_str_utf8_codepoint

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5641356367364096 Project: radare2 Fuzzing Engine: honggfuzz Fuzz Target: iafuzz Job Type: honggfuzzasanradare2 Platform Id: linux Crash Type:...