CVE-2020-27795: High severity radare2 vulnerability
A segmentation fault was discovered in radare2 with adf command. In libr/core/cmdanal.c, when command "adf" has no or wrong argument, analfcndata (core, input + 1) --> RAnalFunction fcn = ranalgetfcnin (core->anal, core->offset, -1); returns null pointer for fcn causing segmentation fault later in ensurefcnrange (fcn).
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-27795?
CVE-2020-27795 is a vulnerability discovered in radare2 with the adf command, which can lead to a segmentation fault.
What is the severity of CVE-2020-27795?
CVE-2020-27795 has a severity level of 7.5 (high).
How does CVE-2020-27795 affect Radare Radare2?
CVE-2020-27795 affects Radare Radare2 version 4.4.0 and prior.
How can I fix CVE-2020-27795?
To fix CVE-2020-27795, it is recommended to update Radare Radare2 to a version later than 4.4.0.
Where can I find more information about CVE-2020-27795?
More information about CVE-2020-27795 can be found in the references provided: [GitHub Commit](https://github.com/radareorg/radare2/commit/4d3811681a80f92a53e795f6a64c4b0fc2c8dd22), [GitHub Issue](https://github.com/radareorg/radare2/issues/16215), [GitHub Pull Request](https://github.com/radareorg/radare2/pull/16230).