CVE-2017-16805

Name of the Vulnerable Software and Affected Versions radare2 version 2.0.1

Description The issue allows remote attackers to cause a denial of service, resulting in an invalid read and application crash, by providing a crafted ELF file. This is related to the r bin dwarf parse comp unit function in dwarf.c and the sdb set internal function in sdb.c.

Recommendations For radare2 version 2.0.1, consider avoiding the use of crafted ELF files until a patch is available. As a temporary workaround, restrict the processing of ELF files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.