Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-2451

Критический

ALT-PU-2020-2451: package radare2 update to version 4.5.0-alt1

Источник
errata.altlinux.org
Дата публикации
24.07.2020
Дата обновления
24.07.2020
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades radare2 to version 4.5.0-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 9.6
ubuntu
больше 6 лет назад

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current directory.

CVSS3: 9.6
nvd
больше 6 лет назад

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current directory.

CVSS3: 9.6
debian
больше 6 лет назад

In radare2 before version 4.5.0, malformed PDB file names in the PDB s ...