CVE-2018-20456
CVE-2018-20456
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash in libr/util/strbuf.c via a stack-based buffer over-read) by crafting an input file, a related issue to CVE-2018-20455.
CVSS 5.5 · Medium · EPSS 1.0%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
radare2 Ubuntu:16.04:LTS
- Versions
- 0.9.6-3.1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:Pro:18.04:LTS
- Versions
- 1.6.0+dfsg-1
- 2.0.0+dfsg-1
- 2.1.0+dfsg-1
- 2.3.0+dfsg-1
- 2.3.0+dfsg-2
- 2.3.0+dfsg-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published