Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In radare2 before 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to an insufficient fix for CVE-2019-14745 and improper handling of symbol names embedded in executables.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
radare2 操作系统命令注入漏洞
Vulnerability Description
radare2是一套用于处理二进制文件的库和工具。 radare2 3.9.0之前版本中的libr/core/cbin.c文件的‘bin_symbols()’函数存在操作系统命令注入漏洞。攻击者可借助特制的可执行文件利用该漏洞以用户权限执行任意的shell命令。
CVSS Information
N/A
Vulnerability Type
N/A