Published: 19/06/2017 Updated: 27/06/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote malicious users to cause a denial of service (use-after-free and application crash) via a crafted binary file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
radare radare2 1.5.0

Debian Bug report logs - #869426 radare2: CVE-2017-9762 Package: src:radare2; Maintainer for src:radare2 is Debian Security Tools <team+pkg-security@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 23 Jul 2017 12:45:01 UTC Severity: important Tags: fixed-upstream, security, upstre ...

Debian Bug report logs - #869423 radare2: CVE-2017-9763 Package: src:radare2; Maintainer for src:radare2 is Debian Security Tools <team+pkg-security@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 23 Jul 2017 12:39:02 UTC Severity: important Tags: fixed-upstream, security, upstre ...

Debian Bug report logs - #869428 radare2: CVE-2017-9761 Package: src:radare2; Maintainer for src:radare2 is Debian Security Tools <team+pkg-security@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 23 Jul 2017 12:54:02 UTC Severity: important Tags: fixed-upstream, security, upstre ...

CWE-416 https://github.com/radare/radare2/issues/7726 http://www.securityfocus.com/bid/99140 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869426

CVE-2017-9762

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect