Lucene search
Veracode Vulnerability DatabaseVERACODE:33985HistoryFeb 03, 2022 - 7:46 a.m.
Denial Of Service (DoS)
2022-02-0307:46:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
denial of service
vulnerability
null pointer dereference
radareorg/radare2
EPSS
0.002
Percentile
51.8%
radareorg/radare2 is vulnerable to denial of service. The vulnerability exists due to a NULL Pointer Dereference in bin_xnu_kernelcache.c allowing an attacker to crash the system by setting the cache_buf pointer in obj to NULL.
References
www.openwall.com/lists/oss-security/2022/05/25/1
census-labs.com/news/2022/05/24/multiple-vulnerabilities-in-radare2/
github.com/radareorg/radare2/commit/feaa4e7f7399c51ee6f52deb84dc3f795b4035d6
huntr.dev/bounties/1f84e79d-70e7-4b29-8b48-a108f81c89aa
huntr.dev/bounties/1f84e79d-70e7-4b29-8b48-a108f81c89aa/
lists.fedoraproject.org/archives/list/[email protected]/message/IQIRJ72UALGMSWH6MYPVJQQLXFGZ23RS/
lists.fedoraproject.org/archives/list/[email protected]/message/SKGIB52R4XPCPNEW6GF56EHW7ST24IJU/
Related
cvelist
cvelist
CVE-2022-0419 NULL Pointer Dereference in radareorg/radare2
2022-02-01 10:38:32
ubuntucve
ubuntucve
CVE-2022-0419
2022-02-01 00:00:00
osv
osv
CVE-2022-0419
2022-02-01 11:15:11
radare2-5.7.0-1.1 on GA media
2024-06-15 00:00:00
cve
cve
CVE-2022-0419
2022-02-01 11:15:11
debiancve
debiancve
CVE-2022-0419
2022-02-01 11:15:11
nvd
nvd
CVE-2022-0419
2022-02-01 11:15:11
huntr
huntr
in radareorg/radare2
2022-01-28 19:34:07
alpinelinux
alpinelinux
CVE-2022-0419
2022-02-01 11:15:11
prion
prion
Null pointer dereference
2022-02-01 11:15:00
openvas
openvas
Fedora: Security Advisory for radare2 (FEDORA-2022-ba3248e596)
2022-02-22 00:00:00
Fedora: Security Advisory for radare2 (FEDORA-2022-3fc85cd09c)
2022-02-22 00:00:00
Mageia: Security Advisory (MGASA-2022-0440)
2022-11-28 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: radare2-5.6.0-1.fc34
2022-02-22 00:26:40
[SECURITY] Fedora 35 Update: radare2-5.6.0-1.fc35
2022-02-22 01:18:13
mageia
mageia
Updated radare2/rizin packages fix security vulnerability
2022-11-27 23:51:49