In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in storeversioninfognu_verdef() in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems.
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "2.3.0+dfsg-2",
"binary_name": "libradare2-2.3"
},
{
"binary_version": "2.3.0+dfsg-2",
"binary_name": "libradare2-2.3-dbgsym"
},
{
"binary_version": "2.3.0+dfsg-2",
"binary_name": "libradare2-common"
},
{
"binary_version": "2.3.0+dfsg-2",
"binary_name": "libradare2-dev"
},
{
"binary_version": "2.3.0+dfsg-2",
"binary_name": "radare2"
},
{
"binary_version": "2.3.0+dfsg-2",
"binary_name": "radare2-dbgsym"
}
]
}