CVE-2020-17487

radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c

published August 11, 2020

CVSS
—
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c. This is due to a malformed object identifier in IMAGE_DIRECTORY_ENTRY_SECURITY.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01834 · 78.8th percentile
Published
2020-08-11T19:43Z
EPSS history
Timeline
  • 11 AUG 19:43Z
    radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c
    cvelistv5