PT-2019-15899 · Radare2+1 · Radare2+1
Mmmdzz
·
Publicado
2019-12-09
·
Atualizado
2022-01-01
·
CVE-2019-19647
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
radare2 versions prior to 4.0.0
Description
The issue is related to a lack of validation of the
content variable in the r asm pseudo incbin function at libr/asm/asm.c. This leads to an arbitrary write, allowing remote attackers to cause a denial of service, such as an application crash, or possibly have other unspecified impacts via crafted input.Recommendations
For versions prior to 4.0.0, update to version 4.0.0 or later to resolve the issue.
Exploit
Correção
DoS
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Radare2