Search for packages
Package details: pkg:deb/ubuntu/radare2@3.1.2%2Bdfsg-1.1
purl pkg:deb/ubuntu/radare2@3.1.2%2Bdfsg-1.1
Next non-vulnerable version 4.2.1+dfsg-1
Latest non-vulnerable version 4.2.1+dfsg-1
Risk 3.5
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-h528-y6as-aaas
Aliases:
CVE-2018-20457
In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c allows attackers to cause a denial-of-service (application crash via an r_num_calc out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is missing in armass64.c, a related issue to CVE-2018-20459.
3.2.1+dfsg-5build1
Affected by 3 other vulnerabilities.
VCID-re7p-72g2-aaae
Aliases:
CVE-2019-19590
In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c. This integer overflow will result in a Use-After-Free for the buffer tokens, which can be filled with arbitrary malicious data after the free. This allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted input.
4.2.1+dfsg-1
Affected by 0 other vulnerabilities.
VCID-sssr-wssj-aaak
Aliases:
CVE-2019-16718
In radare2 before 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to an insufficient fix for CVE-2019-14745 and improper handling of symbol names embedded in executables.
4.2.1+dfsg-1
Affected by 0 other vulnerabilities.
VCID-u4c4-tznp-aaan
Aliases:
CVE-2019-19647
radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted input.
4.2.1+dfsg-1
Affected by 0 other vulnerabilities.
VCID-u6m7-7k5f-aaac
Aliases:
CVE-2018-20459
In radare2 through 3.1.3, the armass_assemble function in libr/asm/arch/arm/armass.c allows attackers to cause a denial-of-service (application crash by out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is missing in armass64.c, a related issue to CVE-2018-20457.
3.2.1+dfsg-5build1
Affected by 3 other vulnerabilities.
Vulnerabilities fixed by this package (5)
Vulnerability Summary Aliases
VCID-5prf-71yw-aaak In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused by stack-based buffer overflow) by crafting an input file. CVE-2018-20460
VCID-b896-75ta-aaaj In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash in libr/util/strbuf.c via a stack-based buffer over-read) by crafting an input file, a related issue to CVE-2018-20455. CVE-2018-20456
VCID-fyvz-ypz7-aaak In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash via a stack-based buffer overflow) by crafting an input file, a related issue to CVE-2018-20456. CVE-2018-20455
VCID-n6bf-wbn1-aaad In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c allows attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting a binary file. CVE-2018-20461
VCID-nyxz-j574-aaap In radare2 prior to 3.1.1, r_bin_dyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting an input file. CVE-2018-20458

Date Actor Action Vulnerability Source VulnerableCode Version