CVE-2020-27793
Quick assessment
Affected
n/a radare2
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
radare2是一套用于处理二进制文件的库和工具。 radare2存在安全漏洞，该漏洞源于core_java.c中的数组长度不匹配。攻击者利用该漏洞执行拒绝服务攻击。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-27793
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a denail of service attack.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
Off-by-one错误
Source: CVE Program / CVE List V5
Vulnerability Title
radare2 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
radare2是一套用于处理二进制文件的库和工具。 radare2存在安全漏洞，该漏洞源于core_java.c中的数组长度不匹配。攻击者利用该漏洞执行拒绝服务攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | radare2 | Fixed in v4.4.0. | - |
|
II. Public POCs for CVE-2020-27793
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-27793
请登录查看更多情报信息。
Patches & Fixes for CVE-2020-27793 (1)
Other References for CVE-2020-27793 (1)
-
https://github.com/radareorg/radare2/issues/16304 x_refsource_MISC
Same Patch Batch · n/a · 2022-08-19 · 28 CVEs total
| CVE-2022-36224 | XunRuiCMS 跨站请求伪造漏洞 | |
| CVE-2020-27794 | radare2 资源管理错误漏洞 | |
| CVE-2020-27795 | radare2 安全漏洞 | |
| CVE-2022-35554 | BPC SmartVista 跨站脚本漏洞 | |
| CVE-2022-36233 | Tenda AC9 缓冲区错误漏洞 | |
| CVE-2022-36171 | MapGIS IGServer 信任管理问题漏洞 | |
| CVE-2022-36157 | XXL-JOB 安全漏洞 | |
| CVE-2022-37175 | Tenda AC15 缓冲区错误漏洞 | |
| CVE-2022-36170 | MapGIS IGServer 信任管理问题漏洞 | |
| CVE-2022-36579 | WellCMS 跨站请求伪造漏洞 | |
| CVE-2022-36578 | JIZHICMS SQL注入漏洞 | |
| CVE-2022-36577 | JIZHICMS 跨站请求伪造漏洞 | |
| CVE-2022-37254 | DolphinPHP跨站脚本漏洞 | |
| CVE-2022-36225 | EyouCms 跨站请求伪造漏洞 | |
| CVE-2022-35167 | Printix Cloud Print Management 授权问题漏洞 | |
| CVE-2022-36263 | StreamLabs Desktop Application 安全漏洞 | |
| CVE-2022-36606 | Ywoa SQL注入漏洞 | |
| CVE-2022-36605 | Yimioa SQL注入漏洞 | |
| CVE-2022-35201 | Tenda AC18 安全漏洞 | |
| CVE-2022-34624 | Mealie 代码问题漏洞 |
Showing top 20 of 28 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: radare2
-
CVE-2026-81883
radare2: Out-of-bounds Read at the end of string in the LUA -
CVE-2026-81885
radare2: Infinite relocation-chain loop causes denial of ser -
CVE-2026-81882
radare2: Missing string termination causes heap out-of-bound -
CVE-2026-81886
radare2: Uncontrolled memory allocation in radare2 dmp64 par -
CVE-2026-81884
radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_I
Same weakness: CWE-193
-
CVE-2026-101014
Trusted Domain Project OpenDMARC DMARC Record opendmarc_util -
CVE-2026-100889
Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decod -
CVE-2026-18460
Off-by-one Error, Out-of-bounds Write vulnerability in RTI C -
CVE-2026-83600
Netdata: Streaming protocol chart slot guard off-by-one allo -
CVE-2026-76081
ZITADEL: Improper Role Revocation on Granted Projects during
V. Comments for CVE-2020-27793
No comments yet