CVE-2018-20460: Buffer Overflow
Published Dec 25, 2018
·Updated
In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused by stack-based buffer overflow) by crafting an input file.
Affected Software
1 affected component
Radare Radare2<3.1.2
Remediation
Event History
Dec 25, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20460?
CVE-2018-20460 has been classified as a denial-of-service vulnerability that can lead to application crashes.
2
How do I fix CVE-2018-20460?
To mitigate CVE-2018-20460, upgrade radare2 to version 3.1.2 or later.
3
What systems are affected by CVE-2018-20460?
CVE-2018-20460 affects versions of radare2 prior to 3.1.2.
4
What type of attack does CVE-2018-20460 allow?
CVE-2018-20460 allows attackers to cause a denial-of-service through a stack-based buffer overflow.
5
Where in radare2 is CVE-2018-20460 found?
CVE-2018-20460 is found in the parseOperands function in the armass64.c file within the libr/asm module.