vulnerability

Ubuntu: (CVE-2017-9949): radare2 vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

Published

Jun 26, 2017

Added

Jun 26, 2025

Modified

Jul 28, 2025

Description

The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GNU GRUB 2.02.

Solution

no-fix-ubuntu-package

References

CVE-2017-9949
https://attackerkb.com/topics/CVE-2017-9949
https://github.com/radare/radare2/commit/796dd28aaa6b9fa76d99c42c4d5ff8b257cc2191
https://github.com/radare/radare2/issues/7683
https://www.cve.org/CVERecord?id=CVE-2017-9949

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report