CVE-2018-11382: Medium severity radare2 vulnerability
Published May 22, 2018
·Updated
The inststs() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
Affected Software
1 affected component
Radare Radare2=2.5.0
Remediation
Event History
May 22, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-11382?
CVE-2018-11382 is classified as a denial of service vulnerability.
2
What type of attack does CVE-2018-11382 enable?
CVE-2018-11382 enables remote attackers to cause a denial of service through a crafted binary file.
3
How can I prevent CVE-2018-11382 from affecting my system?
To prevent CVE-2018-11382, avoid using radare2 version 2.5.0 with untrusted binary files.
4
Which software is affected by CVE-2018-11382?
The affected software for CVE-2018-11382 is radare2 version 2.5.0.
5
What should I do if I am using radare2 2.5.0 and am vulnerable to CVE-2018-11382?
If you are using radare2 2.5.0, it is recommended to upgrade to a patched version to mitigate CVE-2018-11382.