radare2 CVE-2017-10929 Heap Buffer Overflow Vulnerability

Bugtraq ID:	99608
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-10929
Remote:	Yes
Local:	No
Published:	Jul 17 2017 12:00AM
Updated:	Jul 17 2017 12:00AM
Credit:	Unknown
Vulnerable:	GNU GRUB 2.02
Not Vulnerable:

radare2 CVE-2017-10929 Heap Buffer Overflow Vulnerability

radare2 is prone to a heap-based buffer-overflow vulnerability .

An attacker can exploit this issue to crash the affected application, resulting in denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible but this has not been confirmed.

radare2 1.5.0 is vulnerable; other versions may also be affected.

radare2 CVE-2017-10929 Heap Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

radare2 CVE-2017-10929 Heap Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

radare2 CVE-2017-10929 Heap Buffer Overflow Vulnerability

References:

• Fix r2_hbo_grub_memmove ext2 crash (radare2)
  
• Heap buffer overflow in grub_memmove() #7855 (radare2)