Lucene search
Veracode Vulnerability DatabaseVERACODE:34101HistoryFeb 09, 2022 - 4:22 a.m.
Denial Of Service (DoS)
2022-02-0904:22:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
denial of service
radare2.js
vulnerability
out-of-bound read
memory access
application crash
software
EPSS
0.001
Percentile
42.2%
radare2.js is vulnerable to denial of service. The vulnerability exists due to the out-of-bound read in the library, allowing an attacker to access the memory location beyond the buffer length, leading to an application crash.
References
github.com/radareorg/radare2/commit/6c4428f018d385fc80a33ecddcb37becea685dd5
github.com/radareorg/radare2/pull/19671
huntr.dev/bounties/af85b9e1-d1cf-4c0e-ba12-525b82b7c1e3
huntr.dev/bounties/af85b9e1-d1cf-4c0e-ba12-525b82b7c1e3/
lists.fedoraproject.org/archives/list/[email protected]/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/
lists.fedoraproject.org/archives/list/[email protected]/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/
Related
cnvd
cnvd
Radareorg Radare2 Buffer Overflow Vulnerability (CNVD-2022-13392)
2022-02-11 00:00:00
cvelist
cvelist
CVE-2022-0519 Buffer Access with Incorrect Length Value in radareorg/radare2
2022-02-08 20:25:11
debiancve
debiancve
CVE-2022-0519
2022-02-08 21:15:19
ubuntucve
ubuntucve
CVE-2022-0519
2022-02-08 00:00:00
osv
osv
CVE-2022-0519
2022-02-08 21:15:19
radare2-5.7.0-1.1 on GA media
2024-06-15 00:00:00
prion
prion
Buffer overflow
2022-02-08 21:15:00
huntr
huntr
in radareorg/radare2
2022-01-22 15:30:55
nvd
nvd
CVE-2022-0519
2022-02-08 21:15:19
cve
cve
CVE-2022-0519
2022-02-08 21:15:19
alpinelinux
alpinelinux
CVE-2022-0519
2022-02-08 21:15:19
fedora
fedora
[SECURITY] Fedora 36 Update: radare2-5.6.4-1.fc36
2022-03-26 15:39:36
[SECURITY] Fedora 35 Update: radare2-5.6.4-1.fc35
2022-03-11 14:47:54
openvas
openvas
Fedora: Security Advisory for radare2 (FEDORA-2022-85b277e748)
2022-03-27 00:00:00
Fedora: Security Advisory for radare2 (FEDORA-2022-7db9e7bb5b)
2022-03-23 00:00:00
Mageia: Security Advisory (MGASA-2022-0440)
2022-11-28 00:00:00
mageia
mageia
Updated radare2/rizin packages fix security vulnerability
2022-11-27 23:51:49