Vulnerabilities > CVE-2018-15834 - Out-of-bounds Write vulnerability in Radare Radare2

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

radare

CWE-787

NVD

Published: 2018-09-12

Updated: 2020-08-24

Summary

In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/anal/flirt.c via a crafted flirt signature file.

Vulnerable Configurations

Part	Description	Count
Application	Radare Radare Radare2 0.8.6 Radare Radare2 0.8.8 Radare Radare2 0.9 Radare Radare2 0.9.2 Radare Radare2 0.9.4 Radare Radare2 0.9.6 Radare Radare2 0.9.7 Radare Radare2 0.9.7.3-1 Radare Radare2 0.9.8 Radare Radare2 0.9.9 Radare Radare2 0.10.0 Radare Radare2 0.10.1 Radare Radare2 0.10.2 Radare Radare2 0.10.3 Radare Radare2 0.10.4 Radare Radare2 0.10.5 Radare Radare2 0.10.6 Radare Radare2 1.0 Radare Radare2 1.0.1 Radare Radare2 1.0.2 Radare Radare2 1.1.0 Radare Radare2 1.2.0 Radare Radare2 1.2.1 Radare Radare2 1.3.0 Radare Radare2 1.4.0 Radare Radare2 1.5.0 Radare Radare2 1.6.0 Radare Radare2 2.0.0 Radare Radare2 2.0.1 Radare Radare2 2.1.0 Radare Radare2 2.2.0 Radare Radare2 2.3.0 Radare Radare2 2.4.0 Radare Radare2 2.5.0 Radare Radare2 2.6.0 Radare Radare2 2.6.9 Radare Radare2 2.7.0 Radare Radare2 2.8.0	43

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References