6 matches found
CVE-2023-30226
An issue was discovered in function getgnuverneed in rizinorg Rizin prior to 0.5.0 verneedentry allows attackers to cause a denial of service via crafted elf file...
PT-2023-22595
Name of the Vulnerable Software and Affected Versions Rizin versions prior to 0.5.0 Description An issue was discovered in the get gnu verneed function in Rizin, allowing attackers to cause a denial of service via a crafted elf file. Recommendations For versions prior to 0.5.0, update to version...
radare buffer overflow vulnerability (CNVD-2017-34472)
adare is a set of libraries and tools for working with binary files. A memory corruption vulnerability in the 'storeversioninfognuverdef' function and 'storeversioninfognuverneed' function in the libr/bin/format/elf/elf.c file in radare 2.0.1 originates when the program allocates memory...
PT-2017-14370
Name of the Vulnerable Software and Affected Versions radare2 version 2.0.1 Description A memory corruption issue exists due to improper sh size validation when allocating memory. This is demonstrated by an invalid free in the store versioninfo gnu verdef and store versioninfo gnu verneed functio...
UBUNTU-CVE-2017-15931
In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverneed in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems...
PT-2017-14290
Name of the Vulnerable Software and Affected Versions radare2 version 2.0.1 Description The issue exists in the store versioninfo gnu verneed function in libr/bin/format/elf/elf.c, where an integer exception occurs due to a negative number leading to an invalid memory access. This can be triggere...