Published: 02/03/2017 Updated: 04/03/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote malicious users to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
radare radare2 1.2.1

Debian Bug report logs - #856574 radare2: CVE-2017-6387 Package: src:radare2; Maintainer for src:radare2 is Debian Security Tools <team+pkg-security@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 2 Mar 2017 16:09:02 UTC Severity: important Tags: patch, security, upstream Found ...

Debian Bug report logs - #856579 radare2: CVE-2017-6319 Package: src:radare2; Maintainer for src:radare2 is Debian Security Tools <team+pkg-security@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 2 Mar 2017 16:45:02 UTC Severity: important Tags: patch, security, upstream Found ...

Debian Bug report logs - #856572 radare2: CVE-2017-6415 Package: src:radare2; Maintainer for src:radare2 is Debian Security Tools <team+pkg-security@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 2 Mar 2017 15:54:01 UTC Severity: important Tags: patch, security, upstream Found ...

CWE-119 https://github.com/radare/radare2/issues/6836 https://github.com/radare/radare2/commit/ad55822430a03fe075221b543efb434567e9e431 http://www.securityfocus.com/bid/96520 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856574

CVE-2017-6319

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect