CVE-2023-4322

critical

Description

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.

References

https://lists.fedoraproject.org/archives/list/[email protected]/message/SOZ6XCADVAPAIHMVSV3FUAN742BHXF55/

https://lists.fedoraproject.org/archives/list/[email protected]/message/64KUV6OGEVQ75QOV35PUVVDOJTKSJHYN/

https://huntr.dev/bounties/06e2484c-d6f1-4497-af67-26549be9fffd

https://github.com/radareorg/radare2/commit/ba919adb74ac368bf76b150a00347ded78b572dd

Details

Source: Mitre, NVD

Published: 2023-08-14

Updated: 2024-01-21

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical