CVE-2020-27793

Опубликовано: 19 авг. 2022

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a denail of service attack.

Ссылки

https://github.com/radareorg/radare2/commit/ced0223c7a1b3b5344af315715cd28fe7c0d9ebc
Patch
Third Party Advisory
https://github.com/radareorg/radare2/issues/16304
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/radareorg/radare2/commit/ced0223c7a1b3b5344af315715cd28fe7c0d9ebc
Patch
Third Party Advisory
https://github.com/radareorg/radare2/issues/16304
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*

Версия до 4.4.0 (исключая)

EPSS

Процентиль: 68%

0.01178

Низкий

7.5 High

CVSS3

Дефекты

CWE-193

Связанные уязвимости

CVE-2020-27793

CVSS3: 7.5

ubuntu

около 4 лет назад

An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a denail of service attack.

CVE-2020-27793

CVSS3: 7.5

debian

около 4 лет назад

An off-by-one overflow flaw was found in radare2 due to mismatched arr ...

GHSA-wq2p-x6v8-v53j

CVSS3: 7.5

github

около 4 лет назад

An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a denail of service attack.

ALT-PU-2020-2049

CVSS3: 9.1

altlinux

больше 6 лет назад

ALT-PU-2020-2049: package `radare2` update to version 4.4.0-alt1

EPSS

Процентиль: 68%

0.01178

Низкий

7.5 High

CVSS3

Дефекты

CWE-193