VDB
CVE-2020-27793
CVE-2020-27793
PUBLISHED
CVSS 7.5 HIGH
An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a denail of service attack.
EPSS 1.11% · 66.0th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
1.11%
66.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:Pro:20.04:LTS | radare2 | 4.2.1+dfsg-1, 3.2.1+dfsg-5build1, 0 |
| Ubuntu:16.04:LTS | radare2 | 0.9.6-3.1ubuntu1, 0 |
| Ubuntu:Pro:18.04:LTS | radare2 | 1.6.0+dfsg-1, 2.3.0+dfsg-1, 2.1.0+dfsg-1 |
Timeline
- Aug 19, 2022 CVE Published
- Aug 20, 2022 EPSS Score
- Oct 6, 2022 EPSS Score
- Nov 21, 2022 EPSS Score
- Jan 7, 2023 EPSS Score
- Feb 23, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 10, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Aug 28, 2023 EPSS Score
- Oct 14, 2023 EPSS Score
- Nov 30, 2023 EPSS Score