CVE-2022-0559: Use After Free in radareorg/radare2
Published Feb 16, 2022
·Updated
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
Affected Software
10 affected componentsFixes available
Radare Radare2<5.6.2
Fedoraproject Fedora=35
Fedoraproject Fedora=36
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
alpine/radare2<5.6.2-r0
5.6.2-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.6.2-r0
Event History
Feb 16, 2022
CVE Published
via MITRE·10:15 AM
Data Sourced
via MITRE·10:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·11:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-0559?
CVE-2022-0559 is classified as a moderate severity vulnerability due to its potential for causing a use after free condition.
2
How do I fix CVE-2022-0559?
To mitigate CVE-2022-0559, update to version 5.6.2 or later of the radare2 software.
3
Which versions of radare2 are vulnerable to CVE-2022-0559?
Versions of radare2 prior to 5.6.2 are vulnerable to CVE-2022-0559.
4
Does CVE-2022-0559 affect Fedora users?
Yes, CVE-2022-0559 affects Fedora versions 35 and 36 that run vulnerable versions of radare2.
5
What type of vulnerability is CVE-2022-0559?
CVE-2022-0559 is a use after free vulnerability that can lead to memory corruption issues.