CVE-2022-0713: Heap-based Buffer Overflow in radareorg/radare2
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.6.4-r0
Event History
Frequently Asked Questions
What is the vulnerability ID for this heap-based buffer overflow?
The vulnerability ID is CVE-2022-0713.
What is the affected software for this vulnerability?
The affected software is Radare Radare2 prior to version 5.6.4 and Fedora 35 and 36.
What is the severity level of CVE-2022-0713?
The severity level of CVE-2022-0713 is high with a CVSS score of 7.1.
How can I fix the heap-based buffer overflow vulnerability in Radare Radare2?
To fix the vulnerability, update Radare Radare2 to version 5.6.4 or newer.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following references: [Reference 1](https://github.com/radareorg/radare2/commit/a35f89f86ed12161af09330e92e5a213014e46a1), [Reference 2](https://huntr.dev/bounties/d35b3dff-768d-4a09-a742-c18ca8f56d3c), [Reference 3](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/)