A vulnerability classified as problematic was found in radare2 1.3.0 (Programming Tool Software). This vulnerability affects the function get_relocs_64 of the file libr/bin/format/mach0/mach0.c of the component Mach0 File Handler. The manipulation with an unknown input leads to a use after free vulnerability. The CWE definition for the vulnerability is CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code. As an impact it is known to affect availability. CVE summarizes:

The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted Mach0 file.

The bug was discovered 04/18/2017. The weakness was released 04/18/2017 (GitHub Repository). The advisory is available at github.com. This vulnerability was named CVE-2017-7946 since 04/18/2017. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. Technical details are known, but there is no available exploit.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Entries connected to this vulnerability are available at VDB-196589 and VDB-199349.

Productinfo

Type

• Programming Tool Software

Name

• radare2

Version

• 1.3.0

License

• open-source

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion