CVE-2022-1284: heap-use-after-free in radareorg/radare2
heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.6.8-r0
Event History
Frequently Asked Questions
What is CVE-2022-1284?
CVE-2022-1284 is a vulnerability in the GitHub repository radareorg/radare2 prior to version 5.6.8, which can lead to a denial of service attack.
How severe is CVE-2022-1284?
CVE-2022-1284 has a severity level of 5.5, which is considered high.
What software is affected by CVE-2022-1284?
The vulnerability in CVE-2022-1284 affects the Radare Radare2 software version prior to 5.6.8.
How can CVE-2022-1284 be exploited?
CVE-2022-1284 can be exploited through a heap-use-after-free vulnerability in the radareorg/radare2 GitHub repository.
Is there a fix available for CVE-2022-1284?
Yes, updating to version 5.6.8 or higher of the Radare Radare2 software fixes the vulnerability CVE-2022-1284.