CVE-2018-11375: Medium severity radare2 vulnerability
Published May 22, 2018
·Updated
The instlds() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
Affected Software
1 affected component
Radare Radare2=2.5.0
Remediation
Event History
May 22, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-11375?
CVE-2018-11375 has been classified as a denial of service vulnerability.
2
How do I fix CVE-2018-11375?
To fix CVE-2018-11375, you should update radare2 to the latest version beyond 2.5.0.
3
What does CVE-2018-11375 affect?
CVE-2018-11375 affects radare2 version 2.5.0.
4
What is the impact of exploiting CVE-2018-11375?
Exploiting CVE-2018-11375 can lead to a heap-based out-of-bounds read and an application crash.
5
Can CVE-2018-11375 be exploited remotely?
Yes, CVE-2018-11375 can be exploited by remote attackers through a crafted binary file.