Published: 25/12/2018 Updated: 15/10/2020

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

In radare2 up to and including 3.1.3, the armass_assemble function in libr/asm/arch/arm/armass.c allows malicious users to cause a denial-of-service (application crash by out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is missing in armass64.c, a related issue to CVE-2018-20457.

Vulnerable Product	Search on Vulmon	Subscribe to Product
radare radare2

Debian Bug report logs - #917322 radare2: CVE-2018-20457 CVE-2018-20459 Package: src:radare2; Maintainer for src:radare2 is Debian Security Tools <team+pkg-security@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 26 Dec 2018 07:36:05 UTC Severity: important Tags: patch, security, ...

Several security issues were fixed in libcaca ...

CWE-125 https://github.com/radare/radare2/issues/12418 https://github.com/radareorg/radare2/commit/e5c14c167b0dcf0a53d76bd50bacbbcc0dfc1ae7 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=917322 https://nvd.nist.gov https://usn.ubuntu.com/3860-1/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-20459

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect