Debian Security Advisory

DLA-1016-1 radare2 -- LTS security update

Date Reported:
06 Jul 2017
Affected Packages:
radare2
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2017-10929.
More information:

It was discovered that there was a heap-based buffer overflow in radare2, a reverse-engineering framework. The grub_memmove function allowed attackers to cause a remote denial of service.

For Debian 7 Wheezy, this issue has been fixed in radare2 version 0.9-3+deb7u3.

We recommend that you upgrade your radare2 packages.