MGASA-2021-0160: radare2 Mageia

CVSS: UnknownPublished
Published 30-03-2021Last modified 16-04-2026
Open JSON

Vulnerability summary

MGASA-2021-0160 is a vulnerability in radare2 Mageia with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 2 · Downstream 0
CVE-2020-16269CVE-2020-17487

Timeline

  1. 30-03-2021
    PublishedVulnerability first disclosed.
  2. 16-04-2026
    Last modifiedVulnerability information updated.

Description

Updated radare2 packages fix security vulnerabilities radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dwarf.c via a malformed DW_AT_name in the .debug_info section (CVE-2020-16269). radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c. This is due to a malformed object identifier in IMAGE_DIRECTORY_ENTRY_SECURITY (CVE-2020-17487). Also, the radare2-cutter package has been switched to a new upstream that uses a different versioning scheme.

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mageia4 products
  • radare2< 5.1.1-1.mga7
  • radare2-cutter< 0.1.1-1.mga7
  • radare2< 5.1.1-1.mga8
  • radare2-cutter< 0.1.1-1.mga8

1 vendor · 4 products

References

6 links