Integer overflow in radare2 - CVE-2019-19590

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU23422

Integer overflow in radare2 - CVE-2019-19590

Published: December 5, 2019 / Updated: January 25, 2021


Vulnerability identifier: #VU23422
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-19590
CWE-ID: CWE-190
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to integer overflow for the variable "new_token_size" in the "r_asm_massemble" function in "libr/asm/asm.c". A remote attacker can trigger integer overflow, which will result in a Use-After-Free for the buffer tokens and cause a denial of service (DoS) condition or possibly execute arbitrary code via crafted input.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

radare2
Fedora
cutter-re
radare2

How to mitigate CVE-2019-19590

Install update from vendor's website.

cutter-re - addressed in versions 1.10.1-1.fc30, 1.10.1-1.fc31, 1.10.1-2.fc30, 1.10.1-2.fc31, 1.10.1-3.fc30, 1.10.1-3.fc31
radare2 - addressed in versions 4.2.1-1.el7, 4.2.1-1.fc30, 4.2.1-1.fc30.2, 4.2.1-1.fc31, 4.2.1-1.fc31.2, 4.2.1-2.fc30, 4.2.1-2.fc31

External References

Related Security Bulletins