CVE-2020-15121: Command injection in Radare2
In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current directory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 4.5.0-r0 - Upgrade
Upgrade
radare2to a version that resolves this vulnerability.Fixed in 4.5.0
Event History
Frequently Asked Questions
What is the severity of CVE-2020-15121?
CVE-2020-15121 is considered a high severity vulnerability due to its potential for shell injection.
How do I fix CVE-2020-15121?
To fix CVE-2020-15121, upgrade to radare2 version 4.5.0 or later.
What is the impact of CVE-2020-15121?
The impact of CVE-2020-15121 includes execution of arbitrary commands via shell injection.
Which versions of radare2 are affected by CVE-2020-15121?
All versions of radare2 prior to 4.5.0 are affected by CVE-2020-15121.
Can CVE-2020-15121 be exploited remotely?
Yes, CVE-2020-15121 can be exploited remotely if a malicious PDB file is hosted.