CVE-2018-20458: Medium severity radare2 vulnerability
Published Dec 25, 2018
·Updated
In radare2 prior to 3.1.1, rbindyldcacheextract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting an input file.
Affected Software
1 affected component
Radare Radare2<3.1.1
Remediation
Event History
Dec 25, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20458?
CVE-2018-20458 has a medium severity rating due to potential application crashes.
2
How do I fix CVE-2018-20458?
To fix CVE-2018-20458, upgrade radare2 to version 3.1.1 or later.
3
What kind of vulnerability is CVE-2018-20458?
CVE-2018-20458 is an out-of-bounds read vulnerability that can lead to a denial-of-service.
4
Which versions of radare2 are affected by CVE-2018-20458?
CVE-2018-20458 affects all versions of radare2 prior to 3.1.1.
5
What can an attacker do with CVE-2018-20458?
An attacker can exploit CVE-2018-20458 to crash the radare2 application by providing a specially crafted input file.