A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (core, input + 1) --> RAnalFunction *fcn = r_anal_get_fcn_in (core->anal, core->offset, -1); returns null pointer for fcn causing segmentation fault later in ensure_fcn_range (fcn).

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command     adf has no or wrong argument, anal_fcn_data (core, input + 1) --> RAnalFunction *fcn = r_anal_get_fcn_in     (core->anal, core->offset, -1); returns null pointer for fcn causing segmentation fault later in     ensure_fcn_range (fcn). (CVE-2020-27795)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could
    allow an attacker to cause a crash, and perform a denail of service attack. (CVE-2020-27793)

  - A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead
    to modification of unexpected memory locations and potentially causing a crash. (CVE-2020-27794)

  - A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command
    "adf" has no or wrong argument, anal_fcn_data (core, input + 1) --> RAnalFunction *fcn = r_anal_get_fcn_in
    (core->anal, core->offset, -1); returns null pointer for fcn causing segmentation fault later in
    ensure_fcn_range (fcn). (CVE-2020-27795)

ID	Name	Product	Family	Severity
256594	Linux Distros Unpatched Vulnerability : CVE-2020-27795	Nessus	Misc.	high
406876	Alpine: multiple radare2 packages: security update to 4.4.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
406876	Alpine: multiple radare2 packages: security update to 4.4.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical

Detections

Analytics

CVE-2020-27795

high

Tenable Plugins

high

critical

critical