CVE-2023-47016: High severity radare2 vulnerability
Published Nov 22, 2023
·Updated
radare2 5.8.9 has an out-of-bounds read in rbinobjectsetitems in libr/bin/bobj.c, causing a crash in rreadle32 in libr/include/rendian.h.
Affected Software
1 affected component
Radare Radare2<5.9.0
Remediation
Patch Available
Event History
Nov 22, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-47016?
The severity of CVE-2023-47016 is high with a score of 7.5.
2
What software version is affected by CVE-2023-47016?
radare2 versions up to but excluding 5.9.0 are affected by CVE-2023-47016.
3
How can CVE-2023-47016 be exploited?
CVE-2023-47016 can be exploited by causing a crash in r_read_le32 in libr/include/r_endian.h through an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c.
4
Is there a fix available for CVE-2023-47016?
Yes, a fix for CVE-2023-47016 is available. Please refer to the provided references for more information.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-47016?
The Common Weakness Enumeration (CWE) ID for CVE-2023-47016 is CWE-787.