CVE-2022-0676
published 2022-02-22CVE-2022-0676: Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
PriorityP434high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.18%
64.1th percentile
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | radare2 | < radare2 5.9.0+dfsg-1 (sid) | radare2 5.9.0+dfsg-1 (sid) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| radare | radare2 | < 5.6.4 | 5.6.4 |
| radareorg | radareorg_radare2 | >= unspecified < 5.6.4 | 5.6.4 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv7.8HIGH
cisa6.5MEDIUM
vendor_debian7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA
Microsoft Internet Explorer Information Disclosure Vulnerability
cisa·2022-05-23·CVSS 6.5
CVE-2019-0676 [MEDIUM] Microsoft Internet Explorer Information Disclosure Vulnerability
Vulnerability: Microsoft Internet Explorer Information Disclosure Vulnerability
Affected: Microsoft Internet Explorer
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.
Required Action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2019-0676
Remediation Due Date: 2022-06-13
Debian
CVE-2022-0676: radare2 - Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4...
vendor_debian·2022·CVSS 7.8
CVE-2022-0676 [HIGH] CVE-2022-0676: radare2 - Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4...
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
Scope: local
sid: resolved (fixed in 5.9.0+dfsg-1)
GHSA
GHSA-9j79-6mcv-2w43: Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5
ghsa_unreviewed·2022-02-23
CVE-2022-0676 [HIGH] CWE-122 GHSA-9j79-6mcv-2w43: Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
OSV
CVE-2022-0676: Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5
osv·2022-02-22·CVSS 7.8
CVE-2022-0676 [HIGH] CVE-2022-0676: Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/radareorg/radare2/commit/c84b7232626badd075caf3ae29661b609164bac6https://huntr.dev/bounties/5ad814a1-5dd3-43f4-869b-33b8dab78485https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/https://github.com/radareorg/radare2/commit/c84b7232626badd075caf3ae29661b609164bac6https://huntr.dev/bounties/5ad814a1-5dd3-43f4-869b-33b8dab78485https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/
2022-02-22
Published