In radare 2.0.1, a pointer wraparound vulnerability exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c.
References
Link | Resource |
---|---|
https://github.com/radare/radare2/issues/8764 | Exploit Issue Tracking Patch Third Party Advisory |
https://github.com/radare/radare2/commit/fbaf24bce7ea4211e4608b3ab6c1b45702cb243d | Issue Tracking Patch Third Party Advisory |
https://github.com/radare/radare2/commit/d21e91f075a7a7a8ed23baa5c1bb1fac48313882 | Issue Tracking Patch Third Party Advisory |
https://github.com/radare/radare2/commit/62e39f34b2705131a2d08aff0c2e542c6a52cf0e | Issue Tracking Patch Third Party Advisory |
Configurations
Information
Published : 2017-11-01 10:29
Updated : 2017-11-13 08:25
NVD link : CVE-2017-16359
Mitre link : CVE-2017-16359
JSON object : View
CWE
CWE-476
NULL Pointer Dereference
Products Affected
radare
- radare2