CVE-2019-12802

In radare2 through 3.5.1, the rcccontext function of libr/egg/egglang.c mishandles changing context. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact invalid memory access in regglangparsechar; invalid free in rccpusharg...

UBUNTU-CVE-2019-12802

In radare2 through 3.5.1, the rcccontext function of libr/egg/egglang.c mishandles changing context. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact invalid memory access in regglangparsechar; invalid free in rccpusharg...

CVE-2019-12802

CVE-2019-12802 affects radare2 up to 3.5.1, where rcc_context in libr/egg/egg_lang.c mishandles context switching, enabling remote denial of service (crash) and potential other impacts (invalid memory access and free). Public advisories confirm fixes: Fedora updates radare2 to 3.6.0 (and cutter) ...

CVE-2019-12802

In radare2 through 3.5.1, the rcccontext function of libr/egg/egglang.c mishandles changing context. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact invalid memory access in regglangparsechar; invalid free in rccpusharg...

CVE-2019-12802

In radare2 through 3.5.1, the rcccontext function of libr/egg/egglang.c mishandles changing context. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact invalid memory access in regglangparsechar; invalid free in rccpusharg...

CVE-2019-12802

In radare2 through 3.5.1, the rcccontext function of libr/egg/egglang.c mishandles changing context. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact invalid memory access in regglangparsechar; invalid free in rccpusharg...

radare2 buffer overflow vulnerability (CNVD-2019-25724)

radare2 is a set of libraries and tools for working with binary files. A buffer overflow vulnerability in radare2 3.5.1 and earlier versions, which arises from the program failing to check boundaries when changing context, can be exploited by a remote attacker to cause a denial of service...

radare2/ia_fuzz: Heap-buffer-overflow in r_buf_read

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5766040862064640 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

radare2/ia_fuzz: Heap-use-after-free in cin_get

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5695184991420416 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

Heap overflow

In radare2 through 3.5.1, there is a heap-based buffer over-read in the regglangparsechar function of egglang.c. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact because of missing length validation in libr/egg/egg.c...

CVE-2019-12790

In radare2 through 3.5.1, there is a heap-based buffer over-read in the regglangparsechar function of egglang.c. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact because of missing length validation in libr/egg/egg.c...

UBUNTU-CVE-2019-12790

In radare2 through 3.5.1, there is a heap-based buffer over-read in the regglangparsechar function of egglang.c. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact because of missing length validation in libr/egg/egg.c...

CVE-2019-12790

In radare2 through 3.5.1, there is a heap-based buffer over-read in the regglangparsechar function of egglang.c. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact because of missing length validation in libr/egg/egg.c...

CVE-2019-12790

In radare2 through 3.5.1, there is a heap-based buffer over-read in the regglangparsechar function of egglang.c. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact because of missing length validation in libr/egg/egg.c...

CVE-2019-12790

CVE-2019-12790 affects radare2 up to version 3.5.1, where a heap-based buffer over-read in egg_lang.c (r_egg_lang_parsechar) allows denial of service via application crash due to missing length validation in libr/egg/egg.c. Connected advisories confirm this and note that a fix is included in rada...

CVE-2019-12790

In radare2 through 3.5.1, there is a heap-based buffer over-read in the regglangparsechar function of egglang.c. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact because of missing length validation in libr/egg/egg.c...

CVE-2019-12790

In radare2 through 3.5.1, there is a heap-based buffer over-read in the regglangparsechar function of egglang.c. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact because of missing length validation in libr/egg/egg.c...

CVE-2019-12790

In radare2 through 3.5.1, there is a heap-based buffer over-read in the regglangparsechar function of egglang.c. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact because of missing length validation in libr/egg/egg.c...

radare2 buffer overflow vulnerability (CNVD-2019-25510)

radare2 is a set of libraries and tools for working with binary files. A buffer overflow vulnerability exists in the 'regglangparsechar' function in the egglang.c file in radare2 3.5.1 and earlier versions, which can be exploited by an attacker to cause a buffer overflow or heap overflow, among...

radare2/ia_fuzz: Heap-buffer-overflow in r_core_lines_initcache

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5069519589998592 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...