PT-2018-15393 · Radare2+1 · Radare2+1
Nibble
+1
·
Publicado
2018-12-17
·
Atualizado
2020-10-15
·
CVE-2018-20458
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
radare2 versions prior to 3.1.1
Description
The issue allows attackers to cause a denial-of-service, resulting in an application crash due to an out-of-bounds read, by crafting a specific input file. This is related to the
r bin dyldcache extract function in libr/bin/format/mach0/dyldcache.c.Recommendations
For versions prior to 3.1.1, update to version 3.1.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
r bin dyldcache extract function in libr/bin/format/mach0/dyldcache.c to minimize the risk of exploitation.Exploit
Correção
DoS
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Radare2