CVE-2018-11379: Medium severity radare2 vulnerability
Published May 22, 2018
·Updated
The getdebuginfo() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted PE file.
Affected Software
1 affected component
Radare Radare2=2.5.0
Remediation
Event History
May 22, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-11379?
CVE-2018-11379 has a severity level classified as medium due to the potential for denial of service.
2
How do I fix CVE-2018-11379?
To fix CVE-2018-11379, upgrade to a patched version of radare2 that addresses this vulnerability.
3
What type of attack does CVE-2018-11379 enable?
CVE-2018-11379 allows remote attackers to execute a denial of service attack through crafted PE files.
4
Which version of radare2 is affected by CVE-2018-11379?
CVE-2018-11379 affects radare2 version 2.5.0.
5
Can CVE-2018-11379 lead to data loss?
While CVE-2018-11379 primarily causes application crashes, it does not directly lead to data loss.