Search CVE reports


Toggle filters

121 – 130 of 153 results


CVE-2018-11377

Medium priority
Needs evaluation

The avr_op_analyze() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-11376

Medium priority
Needs evaluation

The r_read_le32() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ELF file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-11375

Medium priority
Needs evaluation

The _inst__lds() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-10187

Medium priority
Needs evaluation

In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. Note that this...

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-10186

Medium priority
Needs evaluation

In radare2 2.5.0, there is a heap-based buffer over-read in the r_hex_bin2str function (libr/util/hex.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. This issue is...

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-8810

Medium priority
Needs evaluation

In radare2 2.4.0, there is a heap-based buffer over-read in the get_ivar_list_t function of mach0_classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-8809

Medium priority
Needs evaluation

In radare2 2.4.0, there is a heap-based buffer over-read in the dalvik_op function of anal_dalvik.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-8808

Medium priority
Needs evaluation

In radare2 2.4.0, there is a heap-based buffer over-read in the r_asm_disassemble function of asm.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2017-16805

Low priority
Vulnerable

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file, related to r_bin_dwarf_parse_comp_unit in dwarf.c and sdb_set_internal in...

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Not affected Not in release Not affected Not affected
Show less packages

CVE-2017-16359

Medium priority
Ignored

In radare 2.0.1, a pointer wraparound vulnerability exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Not affected
Show less packages