CVE-2018-11380: Medium severity radare2 vulnerability
Published May 22, 2018
·Updated
The parseimportptr() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted Mach-O file.
Affected Software
1 affected component
Radare Radare2=2.5.0
Remediation
Event History
May 22, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-11380?
CVE-2018-11380 is classified as a denial of service vulnerability.
2
How do I fix CVE-2018-11380?
To mitigate CVE-2018-11380, upgrade radare2 to a version beyond 2.5.0 where the issue has been resolved.
3
What type of attack does CVE-2018-11380 enable?
CVE-2018-11380 enables attackers to perform a denial of service attack by causing an application crash.
4
Is CVE-2018-11380 exploitable through user interaction?
Yes, CVE-2018-11380 can be exploited through the opening of a crafted Mach-O file.
5
Which version of radare2 is affected by CVE-2018-11380?
CVE-2018-11380 specifically affects radare2 version 2.5.0.