Browse CVEs

HIGH 7.8 CVE-2017-15368 The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-rea… Radare2 Patch available Fix from $1,9502017-10-16 HIGH 7.8 CVE-2017-10929 The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based buffer overflow … Radare2 Patch available Fix from $1,9502017-07-05 HIGH 7.8 CVE-2017-9949 The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflo… Radare2 Patch available Fix from $1,9502017-06-26 HIGH 7.5 CVE-2017-9763 The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attacker… Radare2 Patch available Fix from $1,9502017-06-19 MEDIUM 5.5 CVE-2017-9761 The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and app… Radare2 Patch available Fix from $1,6002017-06-19 MEDIUM 5.5 CVE-2017-9762 The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application c… Radare2 Patch available Fix from $1,6002017-06-19 MEDIUM 5.5 CVE-2017-9520 The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and applicati… Radare2 Patch available Fix from $1,6002017-06-08 MEDIUM 5.5 CVE-2017-7946 The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and… Radare2 Patch available Fix from $1,6002017-04-18 MEDIUM 5.5 CVE-2017-7854 The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and appli… Radare2 Patch available Fix from $1,6002017-04-13 MEDIUM 5.5 CVE-2017-7716 The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-rea… Radare2 Patch available Fix from $1,6002017-04-12 HIGH 7.8 CVE-2017-6194 The relocs function in libr/bin/p/bin_bflt.c in radare2 1.2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and ap… Radare2 Patch available Fix from $1,9502017-04-03 HIGH 7.8 CVE-2017-6448 The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer … Radare2 Patch available Fix from $1,9502017-04-03 MEDIUM 5.5 CVE-2017-7274 The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference… Radare2 Patch available Fix from $1,6002017-03-27 HIGH 7.8 CVE-2017-6319 The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (buffer overflow and … Radare2 Patch available Fix from $1,9502017-03-02 MEDIUM 5.5 CVE-2017-6387 The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (out-of-bounds read and appli… Radare2 Patch available Fix from $1,6002017-03-02 MEDIUM 5.5 CVE-2017-6415 The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (NULL pointer derefer… Radare2 Patch available Fix from $1,6002017-03-02 MEDIUM 5.5 CVE-2017-6197 The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (NULL pointer dereference and … Radare2 Patch available Fix from $1,6002017-02-24