CVE-2020-17487

Name of the Vulnerable Software and Affected Versions radare2 version 4.5.0

Description The issue is caused by radare2 misparsing signature information in PE files, leading to a segmentation fault in the r x509 parse algorithmidentifier function in libr/util/x509.c. This occurs due to a malformed object identifier in IMAGE DIRECTORY ENTRY SECURITY.

Recommendations For radare2 version 4.5.0, consider disabling the r x509 parse algorithmidentifier function as a temporary workaround until a patch is available. Restrict access to the libr/util/x509.c module to minimize the risk of exploitation. Avoid processing PE files with malformed object identifiers in IMAGE DIRECTORY ENTRY SECURITY until the issue is resolved.