CVE-2022-1284: Use After Free
First published: Fri Apr 08 2022(Updated: )
heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service.
Credit: security@huntr.dev
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Radare Radare2 | <5.6.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-1284?
CVE-2022-1284 is a vulnerability in the GitHub repository radareorg/radare2 prior to version 5.6.8, which can lead to a denial of service attack.
How severe is CVE-2022-1284?
CVE-2022-1284 has a severity level of 5.5, which is considered high.
What software is affected by CVE-2022-1284?
The vulnerability in CVE-2022-1284 affects the Radare Radare2 software version prior to 5.6.8.
How can CVE-2022-1284 be exploited?
CVE-2022-1284 can be exploited through a heap-use-after-free vulnerability in the radareorg/radare2 GitHub repository.
Is there a fix available for CVE-2022-1284?
Yes, updating to version 5.6.8 or higher of the Radare Radare2 software fixes the vulnerability CVE-2022-1284.
- collector/nvd-index
- vendor/radare
- canonical/radare radare2