mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-24 07:34:01 +02:00
18 lines
725 B
Markdown
18 lines
725 B
Markdown
### [CVE-2018-14015](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14015)
|
|

|
|

|
|

|
|
|
|
### Description
|
|
|
|
The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file because of missing input validation in r_bin_dwarf_parse_comp_unit in libr/bin/dwarf.c.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
- https://github.com/radare/radare2/issues/10465
|
|
|
|
#### Github
|
|
No PoCs found on GitHub currently.
|
|
|