CVE-2018-20455: Buffer Overflow
Published Dec 25, 2018
·Updated
In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service (application crash via a stack-based buffer overflow) by crafting an input file, a related issue to CVE-2018-20456.
Affected Software
1 affected component
Radare Radare2<3.1.1
Remediation
Event History
Dec 25, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20455?
CVE-2018-20455 has been classified as a denial of service vulnerability due to a stack-based buffer overflow.
2
How do I fix CVE-2018-20455?
To fix CVE-2018-20455, upgrade radare2 to version 3.1.1 or later.
3
What causes CVE-2018-20455?
CVE-2018-20455 is caused by the parseOperand function in radare2 failing to properly handle crafted input files.
4
Is CVE-2018-20455 related to other vulnerabilities?
Yes, CVE-2018-20455 is related to CVE-2018-20456, which addresses similar issues.
5
What versions of radare2 are affected by CVE-2018-20455?
CVE-2018-20455 affects all versions of radare2 prior to 3.1.1.