CVE-2022-0695: Denial of Service in radareorg/radare2
First published: Thu Feb 24 2022(Updated: )
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.
Credit: security@huntr.dev
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Radare Radare2 | <5.6.4 | |
| Fedoraproject Fedora | =35 | |
| Fedoraproject Fedora | =36 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/radareorg/radare2/commit/634b886e84a5c568d243e744becc6b3223e089cf
- https://huntr.dev/bounties/bdbddc0e-fb06-4211-a90b-7cbedcee2bea
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-0695.
What is the title of the vulnerability?
The title of the vulnerability is Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.
What is the description of the vulnerability?
The vulnerability is a Denial of Service issue in the GitHub repository radareorg/radare2 prior to version 5.6.4.
What software is affected by this vulnerability?
The vulnerability affects Radare Radare2 versions prior to 5.6.4 and Fedora versions 35 and 36.
What is the severity of CVE-2022-0695?
The severity of CVE-2022-0695 is medium with a severity value of 5.5.
How can I fix the vulnerability CVE-2022-0695?
To fix the vulnerability, update the affected software to version 5.6.4 for Radare Radare2 and follow the instructions provided by Fedora for updating Fedora versions 35 and 36.
- collector/nvd-index
- agent/type
- agent/remedy
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/title
- agent/author
- agent/severity
- agent/references
- agent/description
- agent/first-publish-date
- agent/tags
- agent/event
- vendor/radare
- canonical/radare radare2
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/35
- version/fedoraproject fedora/36