Lucene search

@huntrdevCVELIST:CVE-2023-4322

HistoryAug 14, 2023 - 3:27 p.m.

CVE-2023-4322 Heap-based Buffer Overflow in radareorg/radare2

2023-08-1415:27:40

CWE-122

@huntrdev

www.cve.org

cve-2023-4322

heap-based buffer overflow

radareorg/radare2

github

repository

prior to 5.9.0

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.0%

JSON

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.

CNA Affected

[
  {
    "vendor": "radareorg",
    "product": "radareorg/radare2",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "5.9.0",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/radareorg/radare2/commit/ba919adb74ac368bf76b150a00347ded78b572dd

huntr.dev/bounties/06e2484c-d6f1-4497-af67-26549be9fffd

lists.fedoraproject.org/archives/list/[email protected]/message/64KUV6OGEVQ75QOV35PUVVDOJTKSJHYN/

lists.fedoraproject.org/archives/list/[email protected]/message/SOZ6XCADVAPAIHMVSV3FUAN742BHXF55/

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.0%

JSON

Related for CVELIST:CVE-2023-4322