Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38633
HistoryDec 26, 2022 - 12:56 p.m.

Heap-based Buffer Overflow

2022-12-2612:56:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
radare2
vulnerability
out-of-bounds
crash
software

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

0.0005 Low

EPSS

Percentile

17.9%

radare2, edge is vulnerable to heap based buffer overflow. The vulnerability is due to multiple out-of-bounds writes, which allows an attacker to crash the application.

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

0.0005 Low

EPSS

Percentile

17.9%