SB2020020452 - Fedora 31 update for cutter-re, radare2

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Input validation error (CVE-ID: CVE-2019-19647)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input within the  r_asm_pseudo_incbin(0 function at libr/asm/asm.c. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

2) Integer overflow (CVE-ID: CVE-2019-19590)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to integer overflow for the variable "new_token_size" in the "r_asm_massemble" function in "libr/asm/asm.c". A remote attacker can trigger integer overflow, which will result in a Use-After-Free for the buffer tokens and cause a denial of service (DoS) condition or possibly execute arbitrary code via crafted input.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation

Install update from vendor's website.

References

• https://bodhi.fedoraproject.org/updates/FEDORA-2020-2b0ad67b13