CVE-2022-1031: Use After Free in op_is_set_bp in radareorg/radare2
Use After Free in opissetbp in GitHub repository radareorg/radare2 prior to 5.6.6.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.6.6-r0
Event History
Frequently Asked Questions
What is CVE-2022-1031?
CVE-2022-1031 is a vulnerability which allows for a use after free in op_is_set_bp in GitHub repository radareorg/radare2 prior to version 5.6.6.
What is the severity of CVE-2022-1031?
CVE-2022-1031 has a severity rating of 7.8 (high).
Which software versions are affected by CVE-2022-1031?
The vulnerability affects versions of Radare Radare2 prior to version 5.6.6.
How can I fix CVE-2022-1031?
To fix CVE-2022-1031, it is recommended to update Radare2 to version 5.6.6 or later.
Where can I find more information about CVE-2022-1031?
You can find more information about CVE-2022-1031 at the following references: [GitHub Commit](https://github.com/radareorg/radare2/commit/a7ce29647fcb38386d7439696375e16e093d6acb) and [Huntr Bounty](https://huntr.dev/bounties/37da2cd6-0b46-4878-a32e-acbfd8f6f457).