Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
184 results · page 3 of 4
Feb 24, 2022Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.CVE-2022-0695 · Other software · radareorg · reported by security@huntr.devMedium 5.5
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 23, 2022Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.CVE-2022-0476 · Other software · radareorg · reported by security@huntr.devMedium 5.5
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 22, 2022Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.CVE-2022-0713 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 22, 2022NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4.CVE-2022-0712 · Other software · radareorg · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 21, 2022Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.CVE-2022-0676 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 16, 2022Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.CVE-2022-0559 · Other software · radareorg · reported by security@huntr.devCritical 9.8
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.CVE-2022-0523 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2.CVE-2022-0522 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2.CVE-2022-0521 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Use After Free in NPM radare2.js prior to 5.6.2.CVE-2022-0520 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Use After Free in NPM radare2.js prior to 5.6.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2.CVE-2022-0519 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.CVE-2022-0518 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0.CVE-2022-0139 · Other software · radareorg · reported by security@huntr.devCritical 9.8
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 1, 2022NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0.CVE-2022-0419 · Other software · radareorg · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comcensus-labs.com
Jan 11, 2022radare2 is vulnerable to Out-of-bounds ReadCVE-2022-0173 · Other software · radareorg · reported by security@huntr.devMedium 5.5
radare2 is vulnerable to Out-of-bounds Read
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 2, 2021A vulnerability was found in Radare2 in version 5.3.1.CVE-2021-3673 · Other software · Radare · reported by patrick@puiterwijk.orgHigh 7.5
A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can lead to resource exhaustion and DoS.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.redhat.comlists.fedoraproject.org
Jul 14, 2021A heap buffer overflow vulnerability in the r_asm_swf_disass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or carrCVE-2020-24133 · Other software · Radare · reported by MITRECritical 9.8
A heap buffer overflow vulnerability in the r_asm_swf_disass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or carry out denial of service (DOS) attacks.
- Product
- Radare2-extras
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcwe.mitre.orggithub.com
May 14, 2021In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS.CVE-2021-32613 · Other software · Radare · reported by patrick@puiterwijk.orgMedium 5.5
In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.redhat.comgithub.com
Aug 11, 2020radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c.CVE-2020-17487 · Other software · Radare · reported by MITREHigh 7.5
radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c. This is due to a malformed object identifier in IMAGE_DIRECTORY_ENTRY_SECURITY.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.fedoraproject.org
Aug 3, 2020radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dwarf.c via a malformed DW_AT_name in the .CVE-2020-16269 · Other software · Radare · reported by MITREMedium 5.5
radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dwarf.c via a malformed DW_AT_name in the .debug_info section.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.fedoraproject.org
Jul 20, 2020In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection.CVE-2020-15121 · Other software · radareorg · reported by GitHubHigh 7.4
In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current directory.
- Product
- radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2019radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write.CVE-2019-19647 · Other software · Radare · reported by MITREHigh 7.8
radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted input.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.fedoraproject.org
Dec 4, 2019In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c.CVE-2019-19590 · Other software · Radare · reported by MITREHigh 7.8
In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c. This integer overflow will result in a Use-After-Free for the buffer tokens, which can be filled with arbitrary malicious data after the free. This allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted input.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.fedoraproject.org
Sep 23, 2019In radare2 before 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c.CVE-2019-16718 · Other software · Radare · reported by MITREHigh 7.8
In radare2 before 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to an insufficient fix for CVE-2019-14745 and improper handling of symbol names embedded in executables.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 7, 2019In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c.CVE-2019-14745 · Other software · Radare · reported by MITREHigh 7.8
In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of symbol names embedded in executables.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbananamafia.devgithub.com
Jun 17, 2019In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command.CVE-2019-12865 · Other software · Radare · reported by MITREMedium 5.5
In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.fedoraproject.org
Jun 15, 2019radare2 through 3.5.1 mishandles the RParse API, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified othCVE-2019-12829 · Other software · Radare · reported by MITREHigh 7.5
radare2 through 3.5.1 mishandles the RParse API, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact, as demonstrated by newstr buffer overflows during replace operations. This affects libr/asm/asm.c and libr/parse/parse.c.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 13, 2019In radare2 through 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing context.CVE-2019-12802 · Other software · Radare · reported by MITREHigh 7.8
In radare2 through 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing context. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact (invalid memory access in r_egg_lang_parsechar; invalid free in rcc_pusharg).
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.fedoraproject.org
Jun 10, 2019In radare2 through 3.5.1, there is a heap-based buffer over-read in the r_egg_lang_parsechar function of egg_lang.c.CVE-2019-12790 · Other software · Radare · reported by MITREHigh 7.8
In radare2 through 3.5.1, there is a heap-based buffer over-read in the r_egg_lang_parsechar function of egg_lang.c. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because of missing length validation in libr/egg/egg.c.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.fedoraproject.org
Dec 25, 2018In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c allows attackers to cause a denial-of-service (application crash caused by out-of-bounds readCVE-2018-20461 · Other software · Radare · reported by MITREMedium 5.5
In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c allows attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting a binary file.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 25, 2018In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused byCVE-2018-20460 · Other software · Radare · reported by MITREMedium 5.5
In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused by stack-based buffer overflow) by crafting an input file.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 25, 2018In radare2 through 3.1.3, the armass_assemble function in libr/asm/arch/arm/armass.c allows attackers to cause a denial-of-service (application crash by out-of-CVE-2018-20459 · Other software · Radare · reported by MITREMedium 5.5
In radare2 through 3.1.3, the armass_assemble function in libr/asm/arch/arm/armass.c allows attackers to cause a denial-of-service (application crash by out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is missing in armass64.c, a related issue to CVE-2018-20457.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 25, 2018In radare2 prior to 3.1.1, r_bin_dyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service (application crash causCVE-2018-20458 · Other software · Radare · reported by MITREMedium 5.5
In radare2 prior to 3.1.1, r_bin_dyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting an input file.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 25, 2018In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c allows attackers to cause a denial-of-service (application crash via an r_num_calCVE-2018-20457 · Other software · Radare · reported by MITREMedium 5.5
In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c allows attackers to cause a denial-of-service (application crash via an r_num_calc out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is missing in armass64.c, a related issue to CVE-2018-20459.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 25, 2018In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash in libr/CVE-2018-20456 · Other software · Radare · reported by MITREMedium 5.5
In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash in libr/util/strbuf.c via a stack-based buffer over-read) by crafting an input file, a related issue to CVE-2018-20455.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 25, 2018In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash via a stCVE-2018-20455 · Other software · Radare · reported by MITREMedium 5.5
In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash via a stack-based buffer overflow) by crafting an input file, a related issue to CVE-2018-20456.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 4, 2018opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 assembly data, as demoCVE-2018-19843 · Other software · Radare · reported by MITREMedium 5.5
opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 4, 2018getToken in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (stack-based buffer over-read) via crafted x86 assemblCVE-2018-19842 · Other software · Radare · reported by MITREMedium 5.5
getToken in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (stack-based buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 12, 2018In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/anal/flirt.c via a crafted flirt signaturCVE-2018-15834 · Other software · Radare · reported by MITREMedium 5.5
In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/anal/flirt.c via a crafted flirt signature file.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2018The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read aCVE-2018-14017 · Other software · Radare · reported by MITREMedium 5.5
The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted .class file because of missing input validation in r_bin_java_line_number_table_attr_new.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2018The r_bin_mdmp_init_directory_entry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and apCVE-2018-14016 · Other software · Radare · reported by MITREMedium 5.5
The r_bin_mdmp_init_directory_entry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Mini Crash Dump file.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2018The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted CVE-2018-14015 · Other software · Radare · reported by MITREMedium 5.5
The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file because of missing input validation in r_bin_dwarf_parse_comp_unit in libr/bin/dwarf.c.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 13, 2018There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM binary file.CVE-2018-12322 · Other software · Radare · reported by MITREMedium 5.5
There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM binary file.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 13, 2018There is a heap out of bounds read in radare2 2.6.0 in java_switch_op() in libr/anal/p/anal_java.c via a crafted Java binary file.CVE-2018-12321 · Other software · Radare · reported by MITREHigh 7.8
There is a heap out of bounds read in radare2 2.6.0 in java_switch_op() in libr/anal/p/anal_java.c via a crafted Java binary file.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 13, 2018There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted Java binary file.CVE-2018-12320 · Other software · Radare · reported by MITREHigh 7.8
There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted Java binary file.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 22, 2018The sh_op() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ECVE-2018-11384 · Other software · Radare · reported by MITREMedium 5.5
The sh_op() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ELF file.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 22, 2018The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted ELF file bCVE-2018-11383 · Other software · Radare · reported by MITREMedium 5.5
The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted ELF file because of an uninitialized variable in the CPSE handler in libr/anal/p/anal_avr.c.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 22, 2018The _inst__sts() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafCVE-2018-11382 · Other software · Radare · reported by MITREMedium 5.5
The _inst__sts() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 22, 2018The string_scan_range() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) viaCVE-2018-11381 · Other software · Radare · reported by MITREMedium 5.5
The string_scan_range() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 22, 2018The parse_import_ptr() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via CVE-2018-11380 · Other software · Radare · reported by MITREMedium 5.5
The parse_import_ptr() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted Mach-O file.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.