Lucene search

[email protected]CVE-2021-4021

HistoryFeb 24, 2022 - 7:15 p.m.

CVE-2021-4021

2022-02-2419:15:09

CWE-834

CWE-400

[email protected]

web.nvd.nist.gov

vulnerability

radare2

resource consumption

dos

nvd

elf64

mips

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled with zeros of an ELF64 binary for MIPS architecture can lead to uncontrolled resource consumption and DoS.

CPE configuration

NVD

radareradare2Range≤5.5.0

CPENameOperatorVersion
radare:radare2radare radare2le5.5.0

CPE	Name	Operator	Version
radare:radare2	radare radare2	le	5.5.0

CNA Affected

[
  {
    "product": "radare2",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "radare2 5.6.2, radare2 5.6.0, radare2 5.5.4 and radare2 5.5.2"
      }
    ]
  }
]