Vulnerability Details : CVE-2020-27795
A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (core, input + 1) --> RAnalFunction *fcn = r_anal_get_fcn_in (core->anal, core->offset, -1); returns null pointer for fcn causing segmentation fault later in ensure_fcn_range (fcn).
Vulnerability category: Memory Corruption
Products affected by CVE-2020-27795
- cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-27795
0.14%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 49 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-27795
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2020-27795
-
The product uses or accesses a resource that has not been initialized.Assigned by:
- nvd@nist.gov (Primary)
- secalert@redhat.com (Secondary)
References for CVE-2020-27795
-
https://github.com/radareorg/radare2/issues/16215
command "adf" Segmentation fault · Issue #16215 · radareorg/radare2 · GitHubExploit;Issue Tracking;Patch;Third Party Advisory
-
https://github.com/radareorg/radare2/commit/4d3811681a80f92a53e795f6a64c4b0fc2c8dd22
Fix segfault in adf (#16230) · radareorg/radare2@4d38116 · GitHubPatch;Third Party Advisory
-
https://github.com/radareorg/radare2/pull/16230
Fix segfault in adf by x0urc3 · Pull Request #16230 · radareorg/radare2 · GitHubIssue Tracking;Patch;Third Party Advisory
Jump to