CVE-2022-0849: Use After Free in r_reg_get_name_idx in radareorg/radare2
Published Mar 5, 2022
·Updated
Use After Free in rreggetnameidx in GitHub repository radareorg/radare2 prior to 5.6.6.
Affected Software
8 affected componentsFixes available
Radare Radare2<5.6.6
alpine/radare2<5.6.6-r0
5.6.6-r0
alpine/radare2<5.6.6-r0
5.6.6-r0
alpine/radare2<5.6.6-r0
5.6.6-r0
alpine/radare2<5.6.6-r0
5.6.6-r0
alpine/radare2<5.6.6-r0
5.6.6-r0
alpine/radare2<5.6.6-r0
5.6.6-r0
alpine/radare2<5.6.6-r0
5.6.6-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.6.6-r0
Event History
Mar 5, 2022
CVE Published
via MITRE·09:30 AM
Data Sourced
via MITRE·09:30 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·10:15 AM
DescriptionSeverityAffected Software
Event
10:15 AM
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2022-0849.
2
What is the severity of CVE-2022-0849?
The severity of CVE-2022-0849 is high (5.5).
3
What is the affected software for CVE-2022-0849?
The affected software for CVE-2022-0849 is Radare2 prior to version 5.6.6.
4
What is the CWE ID for CVE-2022-0849?
The CWE ID for CVE-2022-0849 is CWE-416.
5
How can I fix CVE-2022-0849?
To fix CVE-2022-0849, update Radare2 to version 5.6.6 or later.