CVE-2017-9763: Buffer Overflow
The grubext2readblock function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9763?
CVE-2017-9763 has a medium severity rating due to its potential for causing denial of service.
How do I fix CVE-2017-9763?
To fix CVE-2017-9763, upgrade to a version of radare2 later than 1.5.0 that addresses this specific vulnerability.
What type of attack does CVE-2017-9763 facilitate?
CVE-2017-9763 allows remote attackers to perform a denial of service attack, causing an application crash.
Which versions of radare2 are affected by CVE-2017-9763?
CVE-2017-9763 affects radare2 version 1.5.0 and earlier.
What is the impact of exploiting CVE-2017-9763?
Exploiting CVE-2017-9763 can lead to excessive stack use, resulting in an application crash.