CVE-2018-20458

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-20458
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-20458.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2018-20458
Downstream
Published
2018-12-25T19:29:00.417Z
Modified
2025-12-06T13:58:49.016255Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In radare2 prior to 3.1.1, rbindyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting an input file.

References

Affected packages

Git / github.com/radare/radare2

Affected ranges

Type
GIT
Repo
https://github.com/radare/radare2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b143e1b1b5622ef2f41a90f4c0f7ed4c477caf40

Affected versions

0.*

0.10.0
0.10.1
0.10.2
0.10.3
0.10.4
0.10.4-termux4
0.10.5
0.10.6
0.8.6
0.8.8
0.9
0.9.2
0.9.4
0.9.6
0.9.7
0.9.8
0.9.8-rc1
0.9.8-rc2
0.9.8-rc3
0.9.8-rc4
0.9.9

1.*

1.0
1.0.0
1.0.1
1.0.2
1.1.0
1.2.0
1.2.0-git
1.3.0
1.3.0-git
1.4.0
1.5.0
1.6.0

2.*

2.0.0
2.0.1
2.1.0
2.2.0
2.4.0
2.5.0
2.6.0
2.6.9
2.7.0
2.8.0
2.9.0

3.*

3.0.0
3.0.1
3.1.0

Other

radare2-windows-nightly
termux

Database specific

vanir_signatures

[
    {
        "id": "CVE-2018-20458-c708ff72",
        "source": "https://github.com/radare/radare2/commit/b143e1b1b5622ef2f41a90f4c0f7ed4c477caf40",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "91826688001801390993882391060580842390",
                "153573451393114912523381648709776456045",
                "76273051819025290594568241401172330628",
                "223983239877208572709103316397190836729",
                "182546693358306982969485629985754146842"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "libr/bin/format/mach0/dyldcache.c"
        }
    },
    {
        "id": "CVE-2018-20458-f5af8262",
        "source": "https://github.com/radare/radare2/commit/b143e1b1b5622ef2f41a90f4c0f7ed4c477caf40",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "function_hash": "161720472885181522724332432472867243711",
            "length": 217.0
        },
        "target": {
            "function": "r_buf_read_string",
            "file": "libr/bin/format/mach0/dyldcache.c"
        }
    }
]

Git / github.com/radareorg/radare2

Affected ranges

Type
GIT
Repo
https://github.com/radareorg/radare2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
30f4c7b52a4e2dc0d0b1bae487d90f5437c69d19

Affected versions

0.*

0.10.0
0.10.1
0.10.2
0.10.3
0.10.4
0.10.4-termux4
0.10.5
0.10.6
0.8.6
0.8.8
0.9
0.9.2
0.9.4
0.9.6
0.9.7
0.9.8
0.9.8-rc1
0.9.8-rc2
0.9.8-rc3
0.9.8-rc4
0.9.9

1.*

1.0
1.0.0
1.0.1
1.0.2
1.1.0
1.2.0
1.2.0-git
1.3.0
1.3.0-git
1.4.0
1.5.0
1.6.0

2.*

2.0.0
2.0.1
2.1.0
2.2.0
2.4.0
2.5.0
2.6.0
2.6.9
2.7.0
2.8.0
2.9.0

3.*

3.0.0
3.0.1
3.1.0

Other

radare2-windows-nightly
termux

Database specific

vanir_signatures

[
    {
        "id": "CVE-2018-20458-6faeb16d",
        "source": "https://github.com/radareorg/radare2/commit/30f4c7b52a4e2dc0d0b1bae487d90f5437c69d19",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "33697615234698038374817087692842593533",
                "107416886164174987600506473894440617388",
                "165136906653289500006129811050981161828",
                "307808423801991317438087779610783963493",
                "197306588244706090572289457101972937590",
                "23453937759404149304032780830930626892",
                "48645565830626834896255276963913774973",
                "79143757714168592350382606630320278038",
                "122594264965404280577250116718587442747",
                "35317000811384291184355579040281778157",
                "93043934042239327342536855227406636961",
                "154284980941995869959878569114703363939",
                "141067742418168168400446431340085673260",
                "122594264965404280577250116718587442747",
                "113501442067793598217602298376921109149",
                "104755495764440163921667093383128573877",
                "45660416646308782215921207000720577681",
                "33107103318703222496541341453853545890",
                "82363029021622543472965518092718841929",
                "180186444021829823183979026543473611273",
                "68750928414140778618691420272812924082",
                "233782332393436320510781799498341247320",
                "38286177615349822213230147291046856133",
                "162317451857071808331140222295462710129",
                "133204837402986654998212869288455234967",
                "157475155056922961484559689071776260869",
                "305682414167215036765610205165643821735",
                "272568348953340942213789502545805956320",
                "151031390435075064919531200406553093221",
                "102459189796823472295513700474849761378",
                "204720935975153807450903327626688207534",
                "318730493100111169593338374337394427364",
                "199180505858024116082141470974563299848",
                "222954966982767402709875657885270064548",
                "46347142110610930432742040268593541098",
                "120990028991525214042047176465165575421",
                "49315284149594602568252301880015768955",
                "21655873523278281805804328167977235844",
                "124376397949925107136268871652432520265",
                "27937644069751853595300516062067075969",
                "73785588040261856663454313942779492697"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "libr/bin/format/mach0/dyldcache.c"
        }
    },
    {
        "id": "CVE-2018-20458-9e599fc1",
        "source": "https://github.com/radareorg/radare2/commit/30f4c7b52a4e2dc0d0b1bae487d90f5437c69d19",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "function_hash": "26554252658900537163388606766964397773",
            "length": 421.0
        },
        "target": {
            "function": "r_bin_dyldcache_from_bytes_new",
            "file": "libr/bin/format/mach0/dyldcache.c"
        }
    },
    {
        "id": "CVE-2018-20458-c979fa63",
        "source": "https://github.com/radareorg/radare2/commit/30f4c7b52a4e2dc0d0b1bae487d90f5437c69d19",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "function_hash": "266778194537885544084856867930803285434",
            "length": 3790.0
        },
        "target": {
            "function": "r_bin_dyldcache_extract",
            "file": "libr/bin/format/mach0/dyldcache.c"
        }
    }
]