Lucene search

@huntrdevCVELIST:CVE-2023-4322

HistoryAug 14, 2023 - 3:27 p.m.

CVE-2023-4322 Heap-based Buffer Overflow in radareorg/radare2

2023-08-1415:27:40

CWE-122

@huntrdev

www.cve.org

cve-2023-4322

heap-based buffer overflow

radareorg/radare2

github

repository

prior to 5.9.0

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

AI Score

9.7

Confidence

High

EPSS

0.001

Percentile

46.9%

JSON

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.

CNA Affected

[
  {
    "vendor": "radareorg",
    "product": "radareorg/radare2",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "5.9.0",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/radareorg/radare2/commit/ba919adb74ac368bf76b150a00347ded78b572dd

huntr.dev/bounties/06e2484c-d6f1-4497-af67-26549be9fffd

lists.fedoraproject.org/archives/list/[email protected]/message/64KUV6OGEVQ75QOV35PUVVDOJTKSJHYN/

lists.fedoraproject.org/archives/list/[email protected]/message/SOZ6XCADVAPAIHMVSV3FUAN742BHXF55/

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

AI Score

9.7

Confidence

High

EPSS

0.001

Percentile

46.9%

JSON

Related for CVELIST:CVE-2023-4322