CVE-2018-11384: Medium severity radare2 vulnerability
Published May 22, 2018
·Updated
The shop() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ELF file.
Affected Software
1 affected component
Radare Radare2=2.5.0
Remediation
Event History
May 22, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-11384?
CVE-2018-11384 has been classified as a denial of service vulnerability with potential for application crashes.
2
How do I fix CVE-2018-11384?
To mitigate CVE-2018-11384, upgrade to radare2 versions later than 2.5.0 that contain patches for this vulnerability.
3
What type of attack does CVE-2018-11384 enable?
CVE-2018-11384 enables remote attackers to cause a denial of service through a crafted ELF file.
4
Which versions of radare2 are affected by CVE-2018-11384?
CVE-2018-11384 specifically affects radare2 version 2.5.0.
5
What impact does CVE-2018-11384 have on systems?
The impact of CVE-2018-11384 includes heap-based out-of-bounds reads leading to application crashes.