CVE-2017-6319

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/96520
https://github.com/radare/radare2/commit/ad55822430a03fe075221b543efb434567e9e431Issue Tracking, Patch, Third Party Advisory
https://github.com/radare/radare2/issues/6836Issue Tracking, Patch, Third Party Advisory
http://www.securityfocus.com/bid/96520
https://github.com/radare/radare2/commit/ad55822430a03fe075221b543efb434567e9e431Issue Tracking, Patch, Third Party Advisory
https://github.com/radare/radare2/issues/6836Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Mar 2, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-63208.8A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (2015-11-26) and v6.0.1 CVE-2017-63238.0The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0_POST_HF6, and ITMS 7.6_POST_HF7 has an issue whereby XML input containing a CVE-2017-63247.3The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially CVE-2017-63256.6The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to CVE-2017-632610.0The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain CVE-2017-63278.8The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an ind CVE-2017-63288.8The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery (also known as one-click attack and is CVE-2017-63297.8Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading vulnerability. These types of issues occur when an ap CVE-2017-63306.5Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (resource consumption) via crafted CVE-2017-63317.1Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that CVE-2017-63348.8dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands CVE-2017-63355.5The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service