CVE-2020-15121 Command injection in Radare2
Attackers can execute arbitrary shell commands via malformed PDB file names when using the idpd command in Radare2.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2020-15121?
CVE-2020-15121 is a high-severity command injection vulnerability in Fedoraproject Fedora, published on 20 Jul 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current directory.
Weakness: CWE-78
Which versions are affected by CVE-2020-15121?
It affects 2 products.
Products include Fedoraproject Fedora, Radare Radare2.
How do I fix CVE-2020-15121?
Upgrade to a fixed version.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2020-15121 being exploited?
There is no known exploitation of CVE-2020-15121 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as GHSA-r552-vp94-9358, MGASA-2020-0329, UBUNTU-CVE-2020-15121.