Lucene search
+L

126 matches found

Cvelist
Cvelist
•added 2023/07/07 6:27 p.m.•42 views

CVE-2021-32495

Radare2 has a use-after-free vulnerability in pyc parser's getnoneobject function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service...

10CVSS9.4AI score0.00769EPSS
SaveExploits0References2
Mend
Mend
•added 2023/07/07 6:27 p.m.•7 views

CVE-2021-32495

Radare2 has a use-after-free vulnerability in pyc parser's getnoneobject function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service...

10CVSS8.3AI score0.00769EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/07/07 6:27 p.m.•11 views

CVE-2021-32495

Radare2 has a use-after-free vulnerability in pyc parser's getnoneobject function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service...

10CVSS8.4AI score0.00769EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2023/07/07 6:27 p.m.•45 views

CVE-2021-32495

Radare2 has a use-after-free vulnerability in pyc parser's getnoneobject function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service...

10CVSS8.3AI score0.00769EPSS
SaveExploits0
CVE
CVE
•added 2023/07/07 6:27 p.m.•78 views

CVE-2021-32495

CVE-2021-32495 affects Radare2, specifically a use-after-free in the pyc parser’s get_none_object function. The vulnerability allows an attacker to read freed memory, leading to denial of service. The available connected sources reiterate this issue and do not provide additional exploit details, ...

10CVSS8.4AI score0.00769EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/07 12:00 a.m.•9 views

CVE-2021-32495: Use After Free

Radare2 has a use-after-free vulnerability in pyc parser's getnoneobject function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service...

10CVSS8.4AI score0.00769EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/07/07 12:00 a.m.•5 views

PT-2023-12171

Name of the Vulnerable Software and Affected Versions Radare2 affected versions not specified Description The issue is related to a use-after-free vulnerability in the pyc parser's get none object function. This allows an attacker to read freed memory, potentially causing a denial of service...

10CVSS8.4AI score0.00769EPSS
SaveExploits0References9
The Hacker News
The Hacker News
•added 2023/06/01 12:16 p.m.•58 views

Malicious PyPI Packages Using Compiled Python Code to Bypass Detection

Researchers have discovered a novel attack on the Python Package Index PyPI repository that employs compiled Python code to sidestep detection by application security tools. "It may be the first supply chain attack to take advantage of the fact that Python bytecode PYC files can be directly...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/03/29 12:00 a.m.•53 views

Fedora 38 : cutter-re / rizin (2023-af305bed3d)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-af305bed3d advisory. rebase rizin to v0.5.1 and cutter-re to 0.2.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

7.8CVSS6.6AI score0.00386EPSS
SaveExploits1References7
SUSE CVE
SUSE CVE
•added 2023/02/15 3:41 a.m.•7 views

SUSE CVE-2021-32613

In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS...

5.5CVSS7AI score0.01166EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2022/09/25 12:00 a.m.•48 views

GLSA-202209-06 : Rizin: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202209-06 Rizin: Multiple Vulnerabilities - Rizin v0.4.0 and below was discovered to contain an integer overflow via the function getlongobject. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted...

7.8CVSS6.9AI score0.00387EPSS
SaveExploits1References10
NVD
NVD
•added 2022/09/06 8:15 p.m.•19 views

CVE-2022-36040

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from PYCpython files. A user opening a malicious PYC file could be affected by this vulnerability, allowing an attacker to execute code ...

7.8CVSS0.00386EPSS
SaveExploits0References5
Prion
Prion
•added 2022/09/06 8:15 p.m.•23 views

Out-of-bounds

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from PYCpython files. A user opening a malicious PYC file could be affected by this vulnerability, allowing an attacker to execute code ...

4.4CVSS7.7AI score0.00386EPSS
SaveExploits0References5Affected Software1
osv_cve
osv_cve
•added 2022/09/06 12:00 a.m.•13 views

CVE-2022-36040 Rizin Out-of-bounds Write vulnerability in pyc/marshal.c

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from PYCpython files. A user opening a malicious PYC file could be affected by this vulnerability, allowing an attacker to execute code ...

7.8CVSS7.7AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2022/09/06 12:00 a.m.•7 views

CVE-2022-36040 Rizin Out-of-bounds Write vulnerability in pyc/marshal.c

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from PYCpython files. A user opening a malicious PYC file could be affected by this vulnerability, allowing an attacker to execute code ...

7.8CVSS7.8AI score0.00386EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/06 12:00 a.m.•8 views

CVE-2022-36040: Out-of-bounds Write

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from PYCpython files. A user opening a malicious PYC file could be affected by this vulnerability, allowing an attacker to execute code ...

7.8CVSS7.5AI score0.00386EPSS
SaveExploits0References2
Mend
Mend
•added 2022/09/06 12:00 a.m.•4 views

CVE-2022-36040

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from PYCpython files. A user opening a malicious PYC file could be affected by this vulnerability, allowing an attacker to execute code ...

8.5CVSS0.00386EPSS
SaveExploits0References8
CVE
CVE
•added 2022/09/06 12:00 a.m.•98 views

CVE-2022-36040

CVE-2022-36040 affects Rizin up to version 0.4.0. It is an out-of-bounds write when getting data from PYC (Python) files, and a user opening a malicious PYC could cause code execution on the local system. The patch is recorded in commit 68948017423a12786704e54227b8b2f918c2fd27; advisories note up...

7.8CVSS7.6AI score0.00386EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2022/09/06 12:00 a.m.•48 views

CVE-2022-36040 Rizin Out-of-bounds Write vulnerability in pyc/marshal.c

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from PYCpython files. A user opening a malicious PYC file could be affected by this vulnerability, allowing an attacker to execute code ...

7.8CVSS7.9AI score0.00386EPSS
SaveExploits0References5
Veracode
Veracode
•added 2021/12/14 8:34 p.m.•28 views

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists due to a double free vulnerability in the pyc parse which allows an attacker to crash the application via malicious input...

5.5CVSS5.4AI score0.01166EPSS
SaveExploits1References11Affected Software1
Rows per page
Query Builder