CVE-2023-5686
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
26.7%
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| radare:radare2 | radare radare2 | lt | 5.9.0 |
CNA Affected
[
{
"vendor": "radareorg",
"product": "radareorg/radare2",
"versions": [
{
"version": "unspecified",
"lessThan": "5.9.0",
"status": "affected",
"versionType": "custom"
}
]
}
]References
github.com/radareorg/radare2/commit/1bdda93e348c160c84e30da3637acef26d0348de
huntr.com/bounties/bbfe1f76-8fa1-4a8c-909d-65b16e970be0
lists.fedoraproject.org/archives/list/[email protected]/message/64KUV6OGEVQ75QOV35PUVVDOJTKSJHYN/
lists.fedoraproject.org/archives/list/[email protected]/message/SOZ6XCADVAPAIHMVSV3FUAN742BHXF55/
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
26.7%