PT-2022-28130 · Radare2 +1 · Radare2 +1

Name of the Vulnerable Software and Affected Versions: radare2 versions prior to 5.8.2 Description: The issue is a NULL Pointer Dereference in the GitHub repository radareorg/radare2. Recommendations: For versions prior to 5.8.2, update to version 5.8.2 or later to resolve the issue...

CVE-2022-4843

NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2...

NULL Pointer Dereference

Environment bash Distributor ID: Debian Description: Debian GNU/Linux bookworm/sid Release: n/a Codename: bookworm Version I checked against the latest release as of 12/27/22 version 5.8.0 and the current master branch at commit 031da1be8f6c9aa55f6e4e76df962d2c85dc32e8 . Description This...

Heap-based Buffer Overflow

radare2 is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to the segmentation fault in the class.c, which allows an attacker to cause an application crash...

Denial Of Service (DoS)

radare2 is vulnerable to Denial Of Service DoS. The vulnerability exists due to the lack of negative index checks in the analarmcs.c, allowing an attacker to access memory locations before the start of the buffer, leading to a crash of the application...

Heap-based Buffer Overflow

radare2, edge is vulnerable to heap based buffer overflow. The vulnerability is due to multiple out-of-bounds writes in marshal.c , which allows an attacker to crash the application...

Denial Of Service (DoS)

radare2 is vulnerable to Denial Of Service DoS. The vulnerability exists due to the use after free in the marshal.c, which allows an attacker cause an application crash...

Denial Of Service (DoS)

radare2 is vulnerable to Denial Of Service DoS. The vulnerability exists in the iobank.c and newrbtree.c due lack of validation of user inputs which allows an attacker to cause an application crash...

Denial Of Service (DoS)

radare2 is vulnerable to Denial Of Service DoS. The vulnerability exists in the readmodule function of mdmp.c, allowing an attacker to cause an application crash...

Heap-based Buffer Overflow

radare2, edge is vulnerable to heap based buffer overflow. The vulnerability is due to multiple out-of-bounds writes, which allows an attacker to crash the application...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists due to the out-of-bounds read in the library, allowing an attacker to cause an application crash by providing a maliciously crafted input...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists due to the heap buffer overflow in the consumeencodednamenew function of format/wasm/wasm.c, allowing an attacker to cause an application crash by providing a crafted binary file...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists due to the heap-use-after-free in the library, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists due to the out-of-bounds read in rbinjavaconstantvalueattrnew function of the library, allowing an attacker to read sensitive information from other memory locations or cause an application crash...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists due to the out-of-bounds read in rbinjavabootstrapmethodsattrnew function of the library, allowing an attacker to read sensitive information from other memory locations or cause an application crash...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists due to the null pointer dereference in therbinfilextrloadbuffer function of bfile.c, allowing an attacker to cause an application crash through the crafted binary file...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists due to the use after free in rreggetnameidx in the library, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists due to the integer overflow or wraparound in the library, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists due to the heap-use-after-free in the library, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists due to the null pointer dereference in the rbinnegetentrypoints function of the library, allowing an attacker to cause an application crash...