CVE-2021-44974

radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser.
References
Link Resource
http://www.openwall.com/lists/oss-security/2022/05/25/1 Exploit Mailing List Third Party Advisory
https://census-labs.com/news/2022/05/24/multiple-vulnerabilities-in-radare2/ Exploit Third Party Advisory
https://github.com/radareorg/radare2/issues/19478 Exploit Issue Tracking Patch Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*

History

03 Jun 2022, 14:22

Type Values Removed Values Added
CWE CWE-476
CPE cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 4.3
v3 : 5.5
References (MISC) https://census-labs.com/news/2022/05/24/multiple-vulnerabilities-in-radare2/ - (MISC) https://census-labs.com/news/2022/05/24/multiple-vulnerabilities-in-radare2/ - Exploit, Third Party Advisory
References (MISC) https://github.com/radareorg/radare2/issues/19478 - (MISC) https://github.com/radareorg/radare2/issues/19478 - Exploit, Issue Tracking, Patch, Third Party Advisory
References (MLIST) http://www.openwall.com/lists/oss-security/2022/05/25/1 - (MLIST) http://www.openwall.com/lists/oss-security/2022/05/25/1 - Exploit, Mailing List, Third Party Advisory

25 May 2022, 15:15

Type Values Removed Values Added
References
  • (MLIST) http://www.openwall.com/lists/oss-security/2022/05/25/1 -

25 May 2022, 13:57

Type Values Removed Values Added
New CVE

Information

Published : 2022-05-25 12:15

Updated : 2024-02-04 22:29


NVD link : CVE-2021-44974

Mitre link : CVE-2021-44974

CVE.ORG link : CVE-2021-44974


JSON object : View

Products Affected

radare

  • radare2
CWE
CWE-476

NULL Pointer Dereference