CVE-2019-12865: Double Free
In radare2 through 3.5.1, cmdmount in libr/core/cmdmount.c has a double free for the ms command.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 3.9.0 - Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 3.9.0-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2019-12865?
CVE-2019-12865 has a moderate severity level due to its potential to cause instability in affected systems.
How do I fix CVE-2019-12865?
To fix CVE-2019-12865, upgrade radare2 to version 3.5.2 or later, where this issue is resolved.
What versions of radare2 are affected by CVE-2019-12865?
CVE-2019-12865 affects radare2 versions up to and including 3.5.1.
What is the impact of CVE-2019-12865 on my system?
CVE-2019-12865 can lead to a double free vulnerability, potentially causing application crashes or memory corruption.
Is there a workaround for CVE-2019-12865 if I cannot upgrade?
There are no specific workarounds available for CVE-2019-12865, so the recommended action is to upgrade radare2.