SB2021021535 - Fedora 32 update for radare2

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2021021535

SB2021021535 - Fedora 32 update for radare2

Published: February 15, 2021

Security Bulletin ID SB2021021535
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Input validation error (CVE-ID: CVE-2020-16269)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dwarf.c via a malformed DW_AT_name in the .debug_info section.


2) Input validation error (CVE-ID: CVE-2020-17487)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c. This is due to a malformed object identifier in IMAGE_DIRECTORY_ENTRY_SECURITY.


Remediation

Install update from vendor's website.

References