GCVE - cpe:2.3:a:radare:radare2:1.5.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:radare:radare2:1.5.0:*:*:*:*:*:*:*

part: a version: 1.5.0 update: *

Vendor	Radare (`176a3fb1-d88d-5339-a85a-4d42314edb64`)
Product	Radare2 (`e94cf00c-d302-59d8-86a0-ecc4b3e4aefe`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/radareorg/radare2`	purl2cpe	2026-06-01 10:18:02.958701

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-9949`	vulnerable	2026-06-08 05:10:20.164858	Details available The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GNU GRUB 2.02. Published: 2017-06-26T20:00:00.000Z Updated: 2024-08-05T17:24:59.921Z Open on db.gcve.eu Reference links https://github.com/radare/radare2/issues/7683 https://github.com/radare/radare2/commit/796dd28aaa6b9fa76d99c42c4d5ff8b257cc2191 http://www.securityfocus.com/bid/99305	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9763`	vulnerable	2026-06-08 05:10:10.422119	Details available The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array. Published: 2017-06-19T16:00:00.000Z Updated: 2024-08-05T17:18:01.805Z Open on db.gcve.eu Reference links https://github.com/radare/radare2/issues/7723 http://git.savannah.gnu.org/cgit/grub.git/commit/grub-core/fs/ext2.c?id=ac8cac1dac50daaf1c390d701cca3b55e16ee768 https://github.com/radare/radare2/commit/65000a7fd9eea62359e6d6714f17b94a99a82edd http://www.securityfocus.com/bid/99141	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9762`	vulnerable	2026-06-08 05:10:10.421779	Details available The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted binary file. Published: 2017-06-19T16:00:00.000Z Updated: 2024-08-05T17:18:01.796Z Open on db.gcve.eu Reference links https://github.com/radare/radare2/issues/7726 http://www.securityfocus.com/bid/99140	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9761`	vulnerable	2026-06-08 05:10:10.421454	Details available The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file. Published: 2017-06-19T16:00:00.000Z Updated: 2024-08-05T17:18:02.166Z Open on db.gcve.eu Reference links https://github.com/radare/radare2/commit/00e8f205475332d7842d0f0d1481eeab4e83017c https://github.com/radare/radare2/issues/7727 http://www.securityfocus.com/bid/99138	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9520`	vulnerable	2026-06-08 05:10:10.086523	Details available The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX file. Published: 2017-06-08T14:00:00.000Z Updated: 2024-09-16T16:48:59.192Z Open on db.gcve.eu Reference links https://github.com/radare/radare2/commit/f85bc674b2a2256a364fe796351bc1971e106005 https://github.com/radare/radare2/issues/7698	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-10929`	vulnerable	2026-06-08 05:08:36.558425	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.