Veracode Vulnerability DatabaseVERACODE:33331Denial Of Service (DoS)
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
radare2 is vulnerable to denial of service. The vulnerability exists due to a double free vulnerability in the pyc parse.
| CPE | Name | Operator | Version |
|---|---|---|---|
| radare2:sid | eq | 4.3.1+dfsg-1 | |
| radare2:sid | eq | 5.0.0+dfsg-1 | |
| radare2:sid | eq | 4.3.1+dfsg-1 | |
| radare2:sid | eq | 5.0.0+dfsg-1 |
References
bugzilla.redhat.com/show_bug.cgi?id=1959939
github.com/radareorg/radare2/commit/5e16e2d1c9fe245e4c17005d779fde91ec0b9c05
github.com/radareorg/radare2/commit/a07dedb804a82bc01c07072861942dd80c6b6d62
github.com/radareorg/radare2/issues/18666
github.com/radareorg/radare2/issues/18667
github.com/radareorg/radare2/issues/18679
lists.fedoraproject.org/archives/list/[email protected]/message/W3LPB5VGCIA7WA55FSB3YZQFUGZKWD7O/
lists.fedoraproject.org/archives/list/[email protected]/message/Y3S7JB46PONPHXZHIMR2XDPLGJCN5ZIX/
security-tracker.debian.org/tracker/CVE-2021-32613
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P