Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the `r_str_ncpy` function. Therefore I think it is very likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to     5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the     `r_str_ncpy` function. Therefore I think it is very likely to be exploitable. For more general description     of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html). (CVE-2022-1240)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6.
    (CVE-2022-0849)

  - Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6. (CVE-2022-1031)

  - Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.
    (CVE-2022-1052)

  - Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to
    5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the
    `r_str_ncpy` function. Therefore I think it is very likely to be exploitable. For more general description
    of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html). (CVE-2022-1240)

ID	Name	Product	Family	Severity
258187	Linux Distros Unpatched Vulnerability : CVE-2022-1240	Nessus	Misc.	high
406886	Alpine: multiple radare2 packages: security update to 5.6.6-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
406886	Alpine: multiple radare2 packages: security update to 5.6.6-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2022-1240

high

Tenable Plugins

high

high

high