CVE-2017-15368

CVE-2017-15368 affects radare2 2.0.0: the wasm_dis function (libr/asm/arch/wasm/wasm.c) is exploitable via a crafted WASM file and can cause a stack-based buffer over-read, leading to a denial of service (application crash) and potentially other impact due to an incorrect r_hex_bin2str call. Reme...

CVE-2017-15368

The wasmdis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service stack-based buffer over-read and application crash or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect rhexbin2str call...

CVE-2017-15368

The wasmdis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service stack-based buffer over-read and application crash or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect rhexbin2str call...

Disassembler and Runtime Analysis

This post was authored by Paul Rascagneres.IntroductionIn the CCleaner 64bit stage 2 previously described in our blog, we explained that the attacker modified a legitimate executable that is part of "Symantec Endpoint". This file is named EFACli64.dll. The modification is performed in the runtime...

radare2 - Unix-Like Reverse Engineering Framework And Commandline Tools

r2 is a rewrite from scratch of radare in order to provide a set of libraries and tools to work with binary files. The radare project started as a forensics tool, a scriptable command-line hexadecimal editor able to open disk files, but later support for analyzing binaries, disassembling code,...

radare2 heap buffer overflow vulnerability

radare2 is a set of libraries and tools for working with binary files. A heap buffer overflow vulnerability exists in radare2. An attacker could exploit the vulnerability to crash an affected application, resulting in a denial of service condition...

Debian DLA-1016-1 : radare2 security update

It was discovered that there was a heap-based buffer overflow in radare2, a reverse-engineering framework. The grubmemmove function allowed attackers to cause a remote denial of service. For Debian 7 'Wheezy', this issue has been fixed in radare2 version 0.9-3+deb7u3. We recommend that you upgrad...

[SECURITY] [DLA 1016-1] radare2 security update

Package : radare2 Version : 0.9-3+deb7u3 CVE ID : CVE-2017-10929 Debian Bug : 867369 It was discovered that there was a heap-based buffer overflow in radare2, a reverse-engineering framework. The grubmemmove function allowed attackers to cause a remote denial of service. For Debian 7 "Wheezy", th...

DLA-1016-1 radare2 - security update

Bulletin has no description...

CVE-2017-10929

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a read overflow in the...

UBUNTU-CVE-2017-10929

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a read overflow in the...

CVE-2017-10929

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a read overflow in the...

CVE-2017-10929

radare2 1.5.0 is affected by a heap-based buffer overflow in grub_memmove (shlr/grub/kern/misc.c) that can be triggered by a crafted binary, potentially causing a denial of service and other impact; related to a read overflow in grub_disk_read_small_real (kern/disk.c) in GNU GRUB 2.02. Public ref...

CVE-2017-10929

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a read overflow in the...

radare2 'grub_memmove' function denial of service vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'grubmemmove' function in the shlr/grub/kern/misc.c file in radare2 version 1.5.0. A remote attacker can exploit this vulnerability to cause a denial of service stack-based buffer overflo...

CVE-2017-9949

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service stack-based buffer underflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GN...

UBUNTU-CVE-2017-9949

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service stack-based buffer underflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GN...

CVE-2017-9949

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service stack-based buffer underflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GN...

CVE-2017-9949

CVE-2017-9949 affects radare2 1.5.0, where the function grub_memmove in shlr/grub/kern/misc.c can be triggered by a crafted binary file, leading to a stack-based buffer underflow and application crash (denial of service), with potential unspecified impact. Some sources also reference a related bu...

CVE-2017-9949

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service stack-based buffer underflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GN...