Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4. (CVE-2022-0476)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4. (CVE-2022-0476, CVE-2022-0695)

  - Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. (CVE-2022-0676,
    CVE-2022-0713)

  - NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4. (CVE-2022-0712)

ID	Name	Product	Family	Type	Severity
259278	Linux Distros Unpatched Vulnerability : CVE-2022-0476	Nessus	Misc.	Local	medium
406885	Alpine: multiple radare2 packages: security update to 5.6.4-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
406885	Alpine: multiple radare2 packages: security update to 5.6.4-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high

Detections

Analytics

CVE-2022-0476

medium

Tenable Plugins

medium

high

high