CVE-2022-0676: Heap-based Buffer Overflow in radareorg/radare2
Published Feb 22, 2022
·Updated
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
Affected Software
10 affected componentsFixes available
Radare Radare2<5.6.4
Fedoraproject Fedora=35
Fedoraproject Fedora=36
alpine/radare2<5.6.4-r0
5.6.4-r0
alpine/radare2<5.6.4-r0
5.6.4-r0
alpine/radare2<5.6.4-r0
5.6.4-r0
alpine/radare2<5.6.4-r0
5.6.4-r0
alpine/radare2<5.6.4-r0
5.6.4-r0
alpine/radare2<5.6.4-r0
5.6.4-r0
alpine/radare2<5.6.4-r0
5.6.4-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.6.4-r0
Event History
Feb 22, 2022
CVE Published
via MITRE·12:05 AM
Data Sourced
via MITRE·12:05 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·12:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-0676?
CVE-2022-0676 has been classified as a high severity vulnerability due to the risk of a heap-based buffer overflow.
2
How do I fix CVE-2022-0676?
To fix CVE-2022-0676, upgrade radare2 to version 5.6.4 or later.
3
What systems are affected by CVE-2022-0676?
CVE-2022-0676 affects radare2 versions prior to 5.6.4, as well as Fedora versions 35 and 36.
4
What type of vulnerability is CVE-2022-0676?
CVE-2022-0676 is a heap-based buffer overflow vulnerability that can lead to arbitrary code execution.
5
Is CVE-2022-0676 being actively exploited?
As of now, there is no public information indicating that CVE-2022-0676 is being actively exploited in the wild.