CVE-2022-34520
CVE-2022-34520
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service (DOS) via a crafted binary file.
CVSS 5.5 · Medium · EPSS 0.3%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
radare2 Ubuntu:16.04:LTS
- Versions
- 0.9.6-3.1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:Pro:18.04:LTS
- Versions
- 1.6.0+dfsg-1
- 2.0.0+dfsg-1
- 2.1.0+dfsg-1
- 2.3.0+dfsg-1
- 2.3.0+dfsg-2
- 2.3.0+dfsg-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:Pro:20.04:LTS
- Versions
- 3.2.1+dfsg-5build1
- 4.0.0+dfsg-1
- 4.2.1+dfsg-1
- 4.2.1+dfsg-2
- 4.2.1+dfsg-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:Pro:24.04:LTS
- Versions
- 5.5.0+dfsg-1ubuntu1
- 5.5.0+dfsg-1.1ubuntu2
- 5.5.0+dfsg-1.1ubuntu3
- 5.5.0+dfsg-1.1ubuntu3+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:25.10
- Versions
- 5.9.8+dfsg-2
- 5.9.8+dfsg-2ubuntu0.25.10.1
- 5.9.8+dfsg-2ubuntu0.25.10.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:26.10
- Versions
- 6.0.7+ds-1
- 6.1.6+ds-2
- 6.1.6+ds-3
- 6.1.8+ds-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:26.04:LTS
- Versions
- 5.9.8+dfsg-2
- 6.0.4+dfsg-1
- 6.0.7+ds-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published