Published: 19/06/2017 Updated: 05/07/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The grub_ext2_read_block function in fs/ext2.c in GNU GRUB prior to 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote malicious users to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.

Vulnerable Product	Search on Vulmon	Subscribe to Product
radare radare2 1.5.0

Debian Bug report logs - #869426 radare2: CVE-2017-9762 Package: src:radare2; Maintainer for src:radare2 is Debian Security Tools <team+pkg-security@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 23 Jul 2017 12:45:01 UTC Severity: important Tags: fixed-upstream, security, upstre ...

Debian Bug report logs - #869423 radare2: CVE-2017-9763 Package: src:radare2; Maintainer for src:radare2 is Debian Security Tools <team+pkg-security@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 23 Jul 2017 12:39:02 UTC Severity: important Tags: fixed-upstream, security, upstre ...

Debian Bug report logs - #869428 radare2: CVE-2017-9761 Package: src:radare2; Maintainer for src:radare2 is Debian Security Tools <team+pkg-security@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 23 Jul 2017 12:54:02 UTC Severity: important Tags: fixed-upstream, security, upstre ...

The grub_ext2_read_block function in fs/ext2c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2c in radare2 150, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array ...

CWE-119 https://github.com/radare/radare2/issues/7723 https://github.com/radare/radare2/commit/65000a7fd9eea62359e6d6714f17b94a99a82edd http://git.savannah.gnu.org/cgit/grub.git/commit/grub-core/fs/ext2.c?id=ac8cac1dac50daaf1c390d701cca3b55e16ee768 http://www.securityfocus.com/bid/99141 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869426

CVE-2017-9763

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect