CVE-2017-16805: Medium severity radare2 vulnerability
Published Nov 13, 2017
·Updated
In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c.
Affected Software
1 affected component
Radare Radare2=2.0.1
Event History
Nov 13, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-16805?
CVE-2017-16805 has a severity rating that indicates a potential denial of service vulnerability.
2
How do I fix CVE-2017-16805?
To fix CVE-2017-16805, you should upgrade to a patched version of radare2 beyond 2.0.1.
3
What causes CVE-2017-16805?
CVE-2017-16805 is caused by the handling of crafted ELF files in radare2 which can lead to invalid memory reads.
4
Which versions of radare2 are affected by CVE-2017-16805?
CVE-2017-16805 specifically affects radare2 version 2.0.1.
5
Can CVE-2017-16805 be exploited remotely?
Yes, CVE-2017-16805 can be exploited by remote attackers to crash the application.