2451 matches found
radare2 输入验证错误漏洞
radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in radare2 versions prior to 5.8.0 that stems from the presence of an integer overflow vulnerability...
CVE-2022-4398
CVE-2022-4398 affects radare2 (radareorg/radare2) prior to 5.8.0. The issue is described as an Integer Overflow or Wraparound in the project, with the vulnerability path not explicitly detailed in the provided documents. The available sources indicate a fix was released in version 5.8.0 (upgrade ...
CVE-2022-4398
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0...
CVE-2022-4398
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0...
CVE-2022-4398 Integer Overflow or Wraparound in radareorg/radare2
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0...
CVE-2022-4398 Integer Overflow or Wraparound in radareorg/radare2
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0...
PT-2022-27051 · Radare2 +1 · Radare2 +1
Name of the Vulnerable Software and Affected Versions: radare2 versions prior to 5.8.0 Description: The issue is related to an integer overflow or wraparound. Recommendations: For versions prior to 5.8.0, update to version 5.8.0 or later to resolve the issue...
CVE-2022-4398 Integer Overflow or Wraparound in radareorg/radare2
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0...
Mageia: Security Advisory (MGASA-2022-0440)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2022-0440 Updated radare2/rizin packages fix security vulnerability
In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS. CVE-2021-32613 A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can lead to resource exhaustion and DoS...
Updated radare2/rizin packages fix security vulnerability
In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS. CVE-2021-32613 A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can lead to resource exhaustion and DoS...
PT-2022-36741 · Git +1 · Radare2
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write crash. The crash state involves several functions: io memory read, r io plugin read, and r io desc...
PT-2022-36705 · Git +1 · Radare2
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions parse classes 64, classes, and r bin object set items. No...
PT-2022-37325 · Git +1 · Radare2
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Stack-use-after-return READ 1. The crash state involves several functions: check buffer, r bin get...
Double Free
radare2 is vulnerable to double free. The vulnerability exists in radare2 in cmdinfo.c:cmdinfo which could lead to modification of unexpected memory locations and potentially causing a crash...
Denial Of Service (DoS)
radare2 is vulnerable to denial of service. The vulnerability exists due to an off-by-one overflow flaw caused by mismatched array length in corejava.c which allows an attacker to crash the application via malicious input...
Denial Of Service (DoS)
radare2 is vulnerable to denial of service. The vulnerability exists in analfcndata function in cmdanal.c due to a memory corruption which allows an attacker to cause an application crash...
CVE-2020-27793
An off-by-one overflow flaw was found in radare2 due to mismatched array length in corejava.c. This could allow an attacker to cause a crash, and perform a denail of service attack...
CVE-2020-27795
A segmentation fault was discovered in radare2 with adf command. In libr/core/cmdanal.c, when command "adf" has no or wrong argument, analfcndata core, input + 1 -- RAnalFunction fcn = ranalgetfcnin core-anal, core-offset, -1; returns null pointer for fcn causing segmentation fault later in...