Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-20460

Опубликовано: 25 дек. 2018
Источник: debian

Описание

In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused by stack-based buffer overflow) by crafting an input file.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
radare2fixed3.1.2+dfsg-1package
radare2not-affectedjessiepackage

Примечания

  • https://github.com/radare/radare2/commit/df167c7db545953bb7f71c72e98e7a3ca0c793bf

  • https://github.com/radare/radare2/issues/12376

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 7 лет назад

In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused by stack-based buffer overflow) by crafting an input file.

CVSS3: 5.5
nvd
около 7 лет назад

In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused by stack-based buffer overflow) by crafting an input file.

CVSS3: 5.5
github
больше 3 лет назад

In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused by stack-based buffer overflow) by crafting an input file.