CVE-2021-44974

Опубликовано: 25 мая 2022

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser.

Ссылки

http://www.openwall.com/lists/oss-security/2022/05/25/1
Exploit
Mailing List
Third Party Advisory
https://census-labs.com/news/2022/05/24/multiple-vulnerabilities-in-radare2/
Exploit
Third Party Advisory
https://github.com/radareorg/radare2/issues/19478
Exploit
Issue Tracking
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/05/25/1
Exploit
Mailing List
Third Party Advisory
https://census-labs.com/news/2022/05/24/multiple-vulnerabilities-in-radare2/
Exploit
Third Party Advisory
https://github.com/radareorg/radare2/issues/19478
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*

Версия до 5.5.4 (исключая)

EPSS

Процентиль: 60%

0.00894

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2021-44974

CVSS3: 5.5

ubuntu

больше 4 лет назад

radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser.

CVE-2021-44974

CVSS3: 5.5

debian

больше 4 лет назад

radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Derefere ...

GHSA-7m75-j44m-f9x9

CVSS3: 5.5

github

больше 4 лет назад

radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser.

ALT-PU-2022-1001

CVSS3: 7.5

altlinux

почти 5 лет назад

ALT-PU-2022-1001: package `radare2` update to version 5.5.4-alt1

ALT-PU-2024-6421

CVSS3: 9.8

altlinux

больше 2 лет назад

ALT-PU-2024-6421: package `radare2` update to version 5.9.0-alt2

EPSS

Процентиль: 60%

0.00894

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476