The relocs function in libr/bin/p/bin_bflt.c in radare2 1.2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file.
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "2.3.0+dfsg-2",
"binary_name": "libradare2-2.3"
},
{
"binary_version": "2.3.0+dfsg-2",
"binary_name": "libradare2-2.3-dbgsym"
},
{
"binary_version": "2.3.0+dfsg-2",
"binary_name": "libradare2-common"
},
{
"binary_version": "2.3.0+dfsg-2",
"binary_name": "libradare2-dev"
},
{
"binary_version": "2.3.0+dfsg-2",
"binary_name": "radare2"
},
{
"binary_version": "2.3.0+dfsg-2",
"binary_name": "radare2-dbgsym"
}
]
}