CVE-2022-1283
Assigner: @huntrdev
Published: 2022-04-08T17:55:10
State: PUBLISHED
affected: product: radareorg/radare2
vendor: radareorg
versions: lessThan: 5.6.8
status: affected
version: unspecified
versionType: custom
descriptions: value: NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service (application crash).
metrics: cvssV3_0: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.6
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
version: 3.0
problemTypes: descriptions: cweId: CWE-476
description: CWE-476 NULL Pointer Dereference
type: CWE
source: advisory: bfeb8fb8-644d-4587-80d4-cb704c404013
discovery: EXTERNAL
title: NULL Pointer Dereference in r_bin_ne_get_entrypoints function in radareorg/radare2