radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c. This is due to a malformed object identifier in IMAGE_DIRECTORY_ENTRY_SECURITY.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17487
Reference (s):
- FEDORA:FEDORA-2021-e3c95619c1
- URL: https://lists.fedoraproject.org/archives/list/[email protected]/message/45SGGCWFIIV7N2X2QZRREHOW7ODT3IH7/
- FEDORA:FEDORA-2021-f3ebd7554c
- URL: https://lists.fedoraproject.org/archives/list/[email protected]/message/ZJET3RR6W7LAK4H6VPTMAZS24W7XYHRZ/
- https://github.com/radareorg/radare2/issues/17431