CVE-2022-0173
published 2022-01-11CVE-2022-0173: Out-of-bounds Read in radareorg/radare2 radare2 is vulnerable to Out-of-bounds Read
medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
1.10%
62.4th percentile
Out-of-bounds Read in radareorg/radare2
radare2 is vulnerable to Out-of-bounds Read
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | radare2 | < radare2 5.9.0+dfsg-1 (sid) | radare2 5.9.0+dfsg-1 (sid) |
| radareorg | radareorg_radare2 | >= unspecified < Will be fixed in the upcoming r2-5.6.0 | Will be fixed in the upcoming r2-5.6.0 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv3.09.6CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
cvelistv55.5MEDIUM
cisa8.6HIGH
vendor_debian5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CVEList
Out-of-bounds Read in radareorg/radare2
cvelistv5·2022-01-11·CVSS 5.5
CVE-2022-0173 [MEDIUM] CWE-125 Out-of-bounds Read in radareorg/radare2
Out-of-bounds Read in radareorg/radare2
radare2 is vulnerable to Out-of-bounds Read
CISA
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
cisa·2022-03-03·CVSS 8.6
CVE-2018-0173 [HIGH] CWE-20 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Vulnerability: Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Affected: Cisco IOS and IOS XE Software
A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets can allow for denial-of-service (DoS).
Required Action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0173
Remediation Due Date: 2022-03-17
Debian
CVE-2022-0173: radare2 - radare2 is vulnerable to Out-of-bounds Read
vendor_debian·2022·CVSS 5.5
CVE-2022-0173 [MEDIUM] CVE-2022-0173: radare2 - radare2 is vulnerable to Out-of-bounds Read
radare2 is vulnerable to Out-of-bounds Read
Scope: local
sid: resolved (fixed in 5.9.0+dfsg-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-01-11
Published