@huntrdevCVELIST:CVE-2022-0173CVE-2022-0173 Out-of-bounds Read in radareorg/radare2
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.6%
radare2 is vulnerable to Out-of-bounds Read
CNA Affected
[
{
"product": "radareorg/radare2",
"vendor": "radareorg",
"versions": [
{
"lessThan": "Will be fixed in the upcoming r2-5.6.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]References
github.com/radareorg/radare2/commit/37897226a1a31f982bfefdc4aeefc2e50355c73c
huntr.dev/bounties/727d8600-88bc-4dde-8dea-ee3d192600e5
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IQIRJ72UALGMSWH6MYPVJQQLXFGZ23RS/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SKGIB52R4XPCPNEW6GF56EHW7ST24IJU/
Related
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.6%