CVE-2022-0523: Use After Free in radareorg/radare2
Published Feb 8, 2022
·Updated
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
Affected Software
10 affected componentsFixes available
Radare Radare2<5.6.2
Fedoraproject Fedora=35
Fedoraproject Fedora=36
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.6.2-r0
Event History
Feb 8, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·09:15 PM
DescriptionSeverityAffected Software
Event
09:15 PM
Frequently Asked Questions
1
What is the severity of CVE-2022-0523?
CVE-2022-0523 has been classified as a moderate severity vulnerability due to the use after free issue.
2
How do I fix CVE-2022-0523?
To mitigate CVE-2022-0523, update radare2 to version 5.6.2 or later.
3
Which software is affected by CVE-2022-0523?
CVE-2022-0523 affects radare2 versions prior to 5.6.2, as well as Fedora 35 and 36 installations.
4
What type of vulnerability is CVE-2022-0523?
CVE-2022-0523 is categorized as a use after free vulnerability.
5
Where can I find more details about CVE-2022-0523?
More technical details about CVE-2022-0523 can be found in the radare2 GitHub repository.