CVE-2022-1452Out-of-bounds Read in Radare2

CWE-125Out-of-bounds Read8 documents5 sources
Severity
7.1HIGHNVD
EPSS
0.3%
top 48.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 24
Latest updateAug 3

Description

Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html).

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages3 packages

CVEListV5radareorg/radareorg_radare2unspecified5.7.0
NVDradare/radare2< 5.7.0
debiandebian/radare2< radare2 5.9.0+dfsg-1 (sid)

Patches

🔴Vulnerability Details

2
GHSA
GHSA-9xr8-fpxg-qjhf: Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 52022-04-25
OSV
CVE-2022-1452: Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 52022-04-24

📋Vendor Advisories

1
Debian
CVE-2022-1452: radare2 - Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub r...2022

🕵️Threat Intelligence

3
Talos
Vulnerability Spotlight: Vulnerabilities in Alyac antivirus program could stop virus scanning, cause code execution2022-08-03
Talos
Vulnerability Spotlight: Vulnerability in Alyac antivirus program could stop virus scanning, cause denial of service2022-05-10
Talos
Vulnerability Spotlight: Vulnerability in Alyac antivirus program could stop virus scanning, cause denial of service2022-05-10