UBUNTU-CVE-2022-1283

NULL Pointer Dereference in rbinnegetentrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service application crash...

CVE-2022-1283 NULL Pointer Dereference in r_bin_ne_get_entrypoints function in radareorg/radare2

NULL Pointer Dereference in rbinnegetentrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service application crash...

CVE-2022-1283

CVE-2022-1283 affects radare2 up to version 5.6.8. The issue is a NULL pointer dereference in r_bin_ne_get_entrypoints, leading to a denial of service (application crash). The concrete fix indicated by sources is upgrading to 5.6.8 or later; no exploitation details are provided in the documents. ...

CVE-2022-1283

NULL Pointer Dereference in rbinnegetentrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service application crash...

CVE-2022-1283

NULL Pointer Dereference in rbinnegetentrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service application crash...

radare2 资源管理错误漏洞

radare2 is a set of libraries and tools for working with binary files. radare2 is vulnerable to a resource management error that could be exploited by an attacker to cause a denial of service...

radare2 代码问题漏洞

radare2 is a set of libraries and tools for working with binary files. radareorg A code issue vulnerability exists in radare2 versions prior to 5.6.8 that stems from a null pointer dereference in the rbinnegetentrypoints function. An attacker can cause a denial of service via this vulnerability...

Radare2 Buffer Overflow Vulnerability (CNVD-2022-81362)

Radare2 is a set of libraries and tools for working with binary files. Radare2 is vulnerable to a buffer overflow vulnerability that originates in libr/bin/format/ne/ne.c when executing operations on memory that do not properly validate data boundaries. An attacker could exploit this vulnerabilit...

Radare2 Buffer Overflow Vulnerability (CNVD-2022-81363)

Radare2 is a set of libraries and tools for working with binary files. Radare2 5.6.6 and earlier versions are vulnerable to a buffer overflow vulnerability that originates in libr/bin/format/mach0/mach0.c when performing operations on memory that do not properly validate data boundaries. An...

radare2 buffer overflow vulnerability (CNVD-2022-30438)

radare2 is a set of libraries and tools for processing binary files. radare2 versions prior to 5.6.8 are vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause a denial of service...

NULL Pointer Dereference in r_bin_ne_get_entrypoints function

Description A NULL pointer deference vulnerability in rbinnegetentrypoints function due to a missing check before using the pointer. Version bash radare2 5.6.7 27746 @ linux-x86-64 git.5.6.6 commit: 2b77b277d67ce061ee6ef839e7139ebc2103c1e3 build: 2022-04-0614:41:37 POC bash radare2 -q -A poc poc...

Out-of-bounds read in `r_bin_ne_get_relocs` function

Description Out-of-bounds OOB read vulnerability exists in rbinnegetrelocs function in Radare2 5.6.7 due to a missing check on the index value. Version bash radare2 5.6.7 27746 @ linux-x86-64 git.5.6.6 commit: 2b77b277d67ce061ee6ef839e7139ebc2103c1e3 build: 2022-04-0614:41:37 Proof of Concept bas...

CVE-2022-1240

Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the rstrncpy function. Therefore I think it is very likely to be exploitable. For more general...

Heap overflow

Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the rstrncpy function. Therefore I think it is very likely to be exploitable. For more general...

UBUNTU-CVE-2022-1240

Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the rstrncpy function. Therefore I think it is very likely to be exploitable. For more general...

CVE-2022-1240 Heap buffer overflow in libr/bin/format/mach0/mach0.c in radareorg/radare2

Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the rstrncpy function. Therefore I think it is very likely to be exploitable. For more general...

CVE-2022-1240

CVE-2022-1240 affects radare2 prior to 5.8.6. The vulnerability is a heap buffer overflow in libr/bin/format/mach0/mach0.c, with the issue occurring when address sanitizer is disabled during compilation, potentially leading to exploitation via the r_str_ncpy path. Public documents explicitly desc...

CVE-2022-1238

Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see CWE...

CVE-2022-1237

Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see CWE...

Heap overflow

Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see CWE...