CVE-2017-16357

Name	CVE-2017-16357
Description	In radare 2.0.1, a memory corruption vulnerability exists in store_versioninfo_gnu_verdef() and store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c, as demonstrated by an invalid free. This error is due to improper sh_size validation when allocating memory.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	880620

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
radare2 (PTS)	sid	6.0.4+dfsg-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Debian Bugs
radare2	source	wheezy	(not affected)
radare2	source	jessie	(not affected)
radare2	source	(unstable)	2.1.0+dfsg-1	880620

Notes

[jessie] - radare2 <not-affected> (Vulnerable code introduced later)
[wheezy] - radare2 <not-affected> (Vulnerable code introduced later)
https://github.com/radare/radare2/commit/0b973e28166636e0ff1fad80baa0385c9c09c53a
https://github.com/radare/radare2/issues/8742