CVE-2021-44975: Buffer Overflow
Published May 24, 2022
·Updated
radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/analobjc.c mach-o parser.
Affected Software
8 affected componentsFixes available
Radare Radare2=5.5.2
alpine/radare2<5.5.4-r0
5.5.4-r0
alpine/radare2<5.5.4-r0
5.5.4-r0
alpine/radare2<5.5.4-r0
5.5.4-r0
alpine/radare2<5.5.4-r0
5.5.4-r0
alpine/radare2<5.5.4-r0
5.5.4-r0
alpine/radare2<5.5.4-r0
5.5.4-r0
alpine/radare2<5.5.4-r0
5.5.4-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.5.4-r0
Event History
May 24, 2022
CVE Published
via MITRE·02:40 PM
Data Sourced
via MITRE·02:40 PM
Description
Data Sourced
via NVD·03:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·03:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2021-44975?
CVE-2021-44975 is a vulnerability in radareorg radare2 5.5.2 that allows for a buffer overflow via the mach-o parser in /libr/core/anal_objc.c.
2
How severe is CVE-2021-44975?
CVE-2021-44975 has a severity score of 5.5, which is considered medium.
3
How does CVE-2021-44975 affect radare2?
CVE-2021-44975 affects radare2 version 5.5.2.
4
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2021-44975?
CVE-2021-44975 is associated with CWE-119.
5
How can I fix CVE-2021-44975?
There is no official fix available yet for CVE-2021-44975. It is recommended to update to a patched version of radare2 when it becomes available.