Denial of Service Vulnerability in radare2 by Radare
CVE-2019-12829

7.5HIGH

Key Information:

Vendor

Radare

Status
Radare2
Vendor
CVE Published:
15 June 2019

What is CVE-2019-12829?

A vulnerability in radare2 versions up to 3.5.1 exists in the RParse API that can be exploited by remote attackers to cause a denial of service through application crashes. This issue arises from improper handling of buffer overflow conditions during replace operations, specifically affecting the libr/asm/asm.c and libr/parse/parse.c files. Attackers can leverage this flaw to disrupt normal application operations, potentially leading to broader impacts.

References

https://github.com/radare/radare2/issues/14303
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.