CVE-2017-16359
https://notcve.org/view.php?id=CVE-2017-16359
In radare 2.0.1, a pointer wraparound vulnerability exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c. Existe una vulnerabilidad de envoltura de puntero (pointer wraparound) en radare 2.0.1 en store_versioninfo_gnu_verdef() en libr/bin/format/elf/elf.c. • https://github.com/radare/radare2/commit/62e39f34b2705131a2d08aff0c2e542c6a52cf0e https://github.com/radare/radare2/commit/d21e91f075a7a7a8ed23baa5c1bb1fac48313882 https://github.com/radare/radare2/commit/fbaf24bce7ea4211e4608b3ab6c1b45702cb243d https://github.com/radare/radare2/issues/8764 • CWE-476: NULL Pointer Dereference •
CVE-2017-15932
https://notcve.org/view.php?id=CVE-2017-15932
In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems. En radare2 2.0.1, existe una excepción de enteros (número negativo que provoca un acceso de memoria no válido) en store_versioninfo_gnu_verdef() en libr/bin/format/elf/elf.c mediante archivos ELF manipulados cuando se analiza la versión ELF en sistemas de 32 bits. • http://www.securityfocus.com/bid/101614 https://github.com/radare/radare2/commit/44ded3ff35b8264f54b5a900cab32ec489d9e5b9 https://github.com/radare/radare2/issues/8743 • CWE-125: Out-of-bounds Read •
CVE-2017-15931
https://notcve.org/view.php?id=CVE-2017-15931
In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems. En radare2 2.0.1, existe una excepción de enteros (número negativo que provoca un acceso de memoria no válido) en store_versioninfo_gnu_verneed() en libr/bin/format/elf/elf.c mediante archivos ELF manipulados en sistemas de 32 bits. • http://www.securityfocus.com/bid/101609 https://github.com/radare/radare2/commit/c6d0076c924891ad9948a62d89d0bcdaf965f0cd https://github.com/radare/radare2/issues/8731 • CWE-125: Out-of-bounds Read •