CVE-2017-16357: Buffer Overflow
In radare 2.0.1, a memory corruption vulnerability exists in storeversioninfognuverdef() and storeversioninfognuverneed() in libr/bin/format/elf/elf.c, as demonstrated by an invalid free. This error is due to improper shsize validation when allocating memory.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16357?
CVE-2017-16357 is classified as a memory corruption vulnerability within radare2, which can potentially lead to denial of service.
How do I fix CVE-2017-16357?
To fix CVE-2017-16357, upgrade to a patched version of radare2 that addresses the memory corruption issue.
What versions of radare2 are affected by CVE-2017-16357?
CVE-2017-16357 specifically affects radare2 version 2.0.1.
What causes CVE-2017-16357?
CVE-2017-16357 is caused by improper sh_size validation when allocating memory in the store_versioninfo_gnu_verdef() and store_versioninfo_gnu_verneed() functions.
Can CVE-2017-16357 be exploited?
Yes, CVE-2017-16357 can be exploited through a memory corruption attack, resulting in potential abnormal behavior of the application.