CVE-2022-0520: Use After Free in radareorg/radare2
Published Feb 8, 2022
·Updated
Use After Free in NPM radare2.js prior to 5.6.2.
Affected Software
10 affected componentsFixes available
Radare Radare2<5.6.2
Fedoraproject Fedora=35
Fedoraproject Fedora=36
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.6.2-r0
Event History
Feb 8, 2022
CVE Published
via MITRE·08:40 PM
Data Sourced
via MITRE·08:40 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·09:15 PM
DescriptionSeverityAffected Software
Event
09:15 PM
Frequently Asked Questions
1
What is the severity of CVE-2022-0520?
CVE-2022-0520 has been rated as a medium severity vulnerability due to its potential to cause a use after free condition.
2
How do I fix CVE-2022-0520?
To fix CVE-2022-0520, upgrade radare2 to version 5.6.2 or later.
3
What is affected by CVE-2022-0520?
CVE-2022-0520 affects radare2 versions prior to 5.6.2 and the Fedora operating systems 35 and 36.
4
What type of vulnerability is CVE-2022-0520?
CVE-2022-0520 is classified as a use after free vulnerability.
5
What software does CVE-2022-0520 impact?
CVE-2022-0520 impacts the radare2 software package before version 5.6.2.