REDHAT-BUG-1959939: Double Free

The severity of REDHAT-BUG-1959939 is considered high due to its potential to cause denial of service.

To fix REDHAT-BUG-1959939, you should upgrade to a version of radare2 newer than 5.3.0 where the vulnerability has been patched.

The vulnerability in REDHAT-BUG-1959939 is triggered by parsing a crafted file in radare2.

Exploiting REDHAT-BUG-1959939 can lead to a denial of service, making the application unresponsive.

Versions of radare2 up to and including 5.3.0 are affected by REDHAT-BUG-1959939.

Published May 12, 2021

Updated

In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS.

Reference: https://github.com/radareorg/radare2/issues/18679

Upstream patch: https://github.com/radareorg/radare2/commit/049de62730f4954ef9a642f2eeebbca30a8eccdc

Affected Software

1 affected component

Radare2 radare2<5.3.0

May 12, 2021

Data Sourced

via Red Hat·05:06 PM

DescriptionSeverityAffected Software

The severity of REDHAT-BUG-1959939 is considered high due to its potential to cause denial of service.

To fix REDHAT-BUG-1959939, you should upgrade to a version of radare2 newer than 5.3.0 where the vulnerability has been patched.

The vulnerability in REDHAT-BUG-1959939 is triggered by parsing a crafted file in radare2.

Exploiting REDHAT-BUG-1959939 can lead to a denial of service, making the application unresponsive.

Versions of radare2 up to and including 5.3.0 are affected by REDHAT-BUG-1959939.