Lucene search
Veracode Vulnerability DatabaseVERACODE:28546HistoryDec 10, 2020 - 4:12 p.m.
Shell Injection
2020-12-1016:12:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.011 Low
EPSS
Percentile
84.6%
radare2 is vulnerable to shell injection. An attacker may create a malicious PDB file in PDB server path to cause a shell injection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| radare2:3.12 | eq | 4.2.1-r0 | |
| radare2:edge | eq | 4.2.1-r0 | |
| radare2:sid | eq | 4.3.1+dfsg-1 | |
| radare2:3.12 | eq | 4.2.1-r0 | |
| radare2:edge | eq | 4.2.1-r0 | |
| radare2:sid | eq | 4.3.1+dfsg-1 |
References
github.com/radareorg/radare2/commit/04edfa82c1f3fa2bc3621ccdad2f93bdbf00e4f9
github.com/radareorg/radare2/issues/16945
github.com/radareorg/radare2/pull/16966
github.com/radareorg/radare2/security/advisories/GHSA-r552-vp94-9358
lists.fedoraproject.org/archives/list/[email protected]/message/MWC7KNBETYE5MK6VIUU26LUIISIFGSBZ/
lists.fedoraproject.org/archives/list/[email protected]/message/YE77P5RSE2T7JHEKMWF2ARTSJGMPXCFY/
secdb.alpinelinux.org/v3.12/community.yaml
Related
fedora
fedora
[SECURITY] Fedora 31 Update: radare2-4.5.0-1.fc31
2020-08-07 01:09:52
[SECURITY] Fedora 32 Update: radare2-4.5.0-2.fc32
2020-08-07 01:20:12
[SECURITY] Fedora 31 Update: cutter-re-1.11.0-1.fc31
2020-08-07 01:09:52
alpinelinux
alpinelinux
CVE-2020-15121
2020-07-20 18:15:12
openvas
openvas
Fedora: Security Advisory for radare2 (FEDORA-2020-d5b33b6e6c)
2020-08-08 00:00:00
Fedora: Security Advisory for cutter-re (FEDORA-2020-aa51efe207)
2020-08-08 00:00:00
Mageia: Security Advisory (MGASA-2020-0329)
2022-01-28 00:00:00
debiancve
debiancve
CVE-2020-15121
2020-07-20 18:15:12
mageia
mageia
Updated radare2 packages fix security vulnerability
2020-08-18 20:41:27
cvelist
cvelist
CVE-2020-15121 Command injection in Radare2
2020-07-20 18:00:25
nessus
nessus
Fedora 32 : cutter-re / radare2 (2020-aa51efe207)
2020-08-07 00:00:00
Fedora 31 : cutter-re / radare2 (2020-d5b33b6e6c)
2020-08-07 00:00:00
ubuntucve
ubuntucve
CVE-2020-15121
2020-07-20 00:00:00
osv
osv
CVE-2020-15121
2020-07-20 18:15:12
nvd
nvd
CVE-2020-15121
2020-07-20 18:15:12
cve
cve
CVE-2020-15121
2020-07-20 18:15:12
prion
prion
Directory traversal
2020-07-20 18:15:00