Search for packages
Package details: pkg:deb/ubuntu/radare2@3.2.1%2Bdfsg-5build1
purl pkg:deb/ubuntu/radare2@3.2.1%2Bdfsg-5build1
Next non-vulnerable version 4.2.1+dfsg-1
Latest non-vulnerable version 4.2.1+dfsg-1
Risk 3.5
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-re7p-72g2-aaae
Aliases:
CVE-2019-19590
In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c. This integer overflow will result in a Use-After-Free for the buffer tokens, which can be filled with arbitrary malicious data after the free. This allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted input.
4.2.1+dfsg-1
Affected by 0 other vulnerabilities.
VCID-sssr-wssj-aaak
Aliases:
CVE-2019-16718
In radare2 before 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to an insufficient fix for CVE-2019-14745 and improper handling of symbol names embedded in executables.
4.2.1+dfsg-1
Affected by 0 other vulnerabilities.
VCID-u4c4-tznp-aaan
Aliases:
CVE-2019-19647
radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted input.
4.2.1+dfsg-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-h528-y6as-aaas In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c allows attackers to cause a denial-of-service (application crash via an r_num_calc out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is missing in armass64.c, a related issue to CVE-2018-20459. CVE-2018-20457
VCID-u6m7-7k5f-aaac In radare2 through 3.1.3, the armass_assemble function in libr/asm/arch/arm/armass.c allows attackers to cause a denial-of-service (application crash by out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is missing in armass64.c, a related issue to CVE-2018-20457. CVE-2018-20459

Date Actor Action Vulnerability Source VulnerableCode Version