CVE-2020-27794

Опубликовано: 19 авг. 2022

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash.

Ссылки

https://github.com/radareorg/radare2/commit/cb8b683758edddae2d2f62e8e63a738c39f92683
Patch
Third Party Advisory
https://github.com/radareorg/radare2/issues/16303
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/radareorg/radare2/commit/cb8b683758edddae2d2f62e8e63a738c39f92683
Patch
Third Party Advisory
https://github.com/radareorg/radare2/issues/16303
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*

Версия до 4.4.0 (исключая)

EPSS

Процентиль: 67%

0.0114

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-415

Связанные уязвимости

CVE-2020-27794

CVSS3: 9.1

ubuntu

около 4 лет назад

A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash.

CVE-2020-27794

CVSS3: 9.1

debian

около 4 лет назад

A double free issue was discovered in radare2 in cmd_info.c:cmd_info() ...

GHSA-wjh8-mh8q-qg7h

CVSS3: 9.1

github

около 4 лет назад

A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash.

ALT-PU-2020-2049

CVSS3: 9.1

altlinux

больше 6 лет назад

ALT-PU-2020-2049: package `radare2` update to version 4.4.0-alt1

EPSS

Процентиль: 67%

0.0114

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-415