radare2-5.7.0-1.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:12173-1 Final 1 1 2024-06-15T00:00:00Z current 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z radare2-5.7.0-1.1 on GA media These are all security issues fixed in the radare2-5.7.0-1.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-12173 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2022-0139/ SUSE CVE CVE-2022-0139 page https://www.suse.com/security/cve/CVE-2022-0173/ SUSE CVE CVE-2022-0173 page https://www.suse.com/security/cve/CVE-2022-0419/ SUSE CVE CVE-2022-0419 page https://www.suse.com/security/cve/CVE-2022-0476/ SUSE CVE CVE-2022-0476 page https://www.suse.com/security/cve/CVE-2022-0518/ SUSE CVE CVE-2022-0518 page https://www.suse.com/security/cve/CVE-2022-0519/ SUSE CVE CVE-2022-0519 page https://www.suse.com/security/cve/CVE-2022-0520/ SUSE CVE CVE-2022-0520 page https://www.suse.com/security/cve/CVE-2022-0521/ SUSE CVE CVE-2022-0521 page https://www.suse.com/security/cve/CVE-2022-0522/ SUSE CVE CVE-2022-0522 page https://www.suse.com/security/cve/CVE-2022-0523/ SUSE CVE CVE-2022-0523 page https://www.suse.com/security/cve/CVE-2022-0559/ SUSE CVE CVE-2022-0559 page https://www.suse.com/security/cve/CVE-2022-0676/ SUSE CVE CVE-2022-0676 page https://www.suse.com/security/cve/CVE-2022-0695/ SUSE CVE CVE-2022-0695 page https://www.suse.com/security/cve/CVE-2022-0712/ SUSE CVE CVE-2022-0712 page https://www.suse.com/security/cve/CVE-2022-0713/ SUSE CVE CVE-2022-0713 page https://www.suse.com/security/cve/CVE-2022-0849/ SUSE CVE CVE-2022-0849 page https://www.suse.com/security/cve/CVE-2022-1031/ SUSE CVE CVE-2022-1031 page https://www.suse.com/security/cve/CVE-2022-1052/ SUSE CVE CVE-2022-1052 page https://www.suse.com/security/cve/CVE-2022-1061/ SUSE CVE CVE-2022-1061 page https://www.suse.com/security/cve/CVE-2022-1207/ SUSE CVE CVE-2022-1207 page https://www.suse.com/security/cve/CVE-2022-1237/ SUSE CVE CVE-2022-1237 page https://www.suse.com/security/cve/CVE-2022-1238/ SUSE CVE CVE-2022-1238 page https://www.suse.com/security/cve/CVE-2022-1240/ SUSE CVE CVE-2022-1240 page https://www.suse.com/security/cve/CVE-2022-1244/ SUSE CVE CVE-2022-1244 page https://www.suse.com/security/cve/CVE-2022-1283/ SUSE CVE CVE-2022-1283 page https://www.suse.com/security/cve/CVE-2022-1284/ SUSE CVE CVE-2022-1284 page https://www.suse.com/security/cve/CVE-2022-1296/ SUSE CVE CVE-2022-1296 page https://www.suse.com/security/cve/CVE-2022-1297/ SUSE CVE CVE-2022-1297 page https://www.suse.com/security/cve/CVE-2022-1382/ SUSE CVE CVE-2022-1382 page https://www.suse.com/security/cve/CVE-2022-1383/ SUSE CVE CVE-2022-1383 page https://www.suse.com/security/cve/CVE-2022-1437/ SUSE CVE CVE-2022-1437 page https://www.suse.com/security/cve/CVE-2022-1444/ SUSE CVE CVE-2022-1444 page https://www.suse.com/security/cve/CVE-2022-1451/ SUSE CVE CVE-2022-1451 page https://www.suse.com/security/cve/CVE-2022-1452/ SUSE CVE CVE-2022-1452 page https://www.suse.com/security/cve/CVE-2022-1649/ SUSE CVE CVE-2022-1649 page https://www.suse.com/security/cve/CVE-2022-1714/ SUSE CVE CVE-2022-1714 page https://www.suse.com/security/cve/CVE-2022-1809/ SUSE CVE CVE-2022-1809 page https://www.suse.com/security/cve/CVE-2022-1899/ SUSE CVE CVE-2022-1899 page openSUSE Tumbleweed radare2-5.7.0-1.1 radare2-devel-5.7.0-1.1 radare2-zsh-completion-5.7.0-1.1 radare2-5.7.0-1.1 as a component of openSUSE Tumbleweed radare2-devel-5.7.0-1.1 as a component of openSUSE Tumbleweed radare2-zsh-completion-5.7.0-1.1 as a component of openSUSE Tumbleweed Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0. CVE-2022-0139 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0139.html CVE-2022-0139 https://bugzilla.suse.com/1195713 SUSE Bug 1195713 radare2 is vulnerable to Out-of-bounds Read CVE-2022-0173 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0173.html CVE-2022-0173 https://bugzilla.suse.com/1194600 SUSE Bug 1194600 NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0. CVE-2022-0419 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0419.html CVE-2022-0419 https://bugzilla.suse.com/1195444 SUSE Bug 1195444 Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4. CVE-2022-0476 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0476.html CVE-2022-0476 https://bugzilla.suse.com/1196414 SUSE Bug 1196414 Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2. CVE-2022-0518 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0518.html CVE-2022-0518 https://bugzilla.suse.com/1195746 SUSE Bug 1195746 Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2. CVE-2022-0519 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0519.html CVE-2022-0519 https://bugzilla.suse.com/1195761 SUSE Bug 1195761 Use After Free in NPM radare2.js prior to 5.6.2. CVE-2022-0520 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0520.html CVE-2022-0520 https://bugzilla.suse.com/1195741 SUSE Bug 1195741 Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2. CVE-2022-0521 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0521.html CVE-2022-0521 https://bugzilla.suse.com/1195760 SUSE Bug 1195760 Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2. CVE-2022-0522 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0522.html CVE-2022-0522 https://bugzilla.suse.com/1195742 SUSE Bug 1195742 Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2. CVE-2022-0523 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0523.html CVE-2022-0523 https://bugzilla.suse.com/1195720 SUSE Bug 1195720 Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2. CVE-2022-0559 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0559.html CVE-2022-0559 https://bugzilla.suse.com/1196052 SUSE Bug 1196052 Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. CVE-2022-0676 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0676.html CVE-2022-0676 https://bugzilla.suse.com/1196345 SUSE Bug 1196345 Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4. CVE-2022-0695 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0695.html CVE-2022-0695 https://bugzilla.suse.com/1196484 SUSE Bug 1196484 NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4. CVE-2022-0712 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0712.html CVE-2022-0712 https://bugzilla.suse.com/1196320 SUSE Bug 1196320 Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. CVE-2022-0713 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0713.html CVE-2022-0713 https://bugzilla.suse.com/1196319 SUSE Bug 1196319 Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6. CVE-2022-0849 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-0849.html CVE-2022-0849 https://bugzilla.suse.com/1196819 SUSE Bug 1196819 Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6. CVE-2022-1031 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1031.html CVE-2022-1031 https://bugzilla.suse.com/1197420 SUSE Bug 1197420 Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6. CVE-2022-1052 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1052.html CVE-2022-1052 https://bugzilla.suse.com/1197509 SUSE Bug 1197509 Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8. CVE-2022-1061 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1061.html CVE-2022-1061 https://bugzilla.suse.com/1197508 SUSE Bug 1197508 Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to read sensitive information from outside the allocated buffer boundary. CVE-2022-1207 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1207.html CVE-2022-1207 https://bugzilla.suse.com/1197991 SUSE Bug 1197991 Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html). CVE-2022-1237 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1237.html CVE-2022-1237 https://bugzilla.suse.com/1198185 SUSE Bug 1198185 Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html). CVE-2022-1238 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1238.html CVE-2022-1238 https://bugzilla.suse.com/1198186 SUSE Bug 1198186 Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the `r_str_ncpy` function. Therefore I think it is very likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html). CVE-2022-1240 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1240.html CVE-2022-1240 https://bugzilla.suse.com/1198187 SUSE Bug 1198187 heap-buffer-overflow in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service. CVE-2022-1244 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1244.html CVE-2022-1244 https://bugzilla.suse.com/1198132 SUSE Bug 1198132 NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service (application crash). CVE-2022-1283 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1283.html CVE-2022-1283 https://bugzilla.suse.com/1198291 SUSE Bug 1198291 heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service. CVE-2022-1284 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1284.html CVE-2022-1284 https://bugzilla.suse.com/1198292 SUSE Bug 1198292 Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash. CVE-2022-1296 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1296.html CVE-2022-1296 https://bugzilla.suse.com/1198375 SUSE Bug 1198375 Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash. CVE-2022-1297 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1297.html CVE-2022-1297 https://bugzilla.suse.com/1198376 SUSE Bug 1198376 NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affecting the availability of the system. CVE-2022-1382 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1382.html CVE-2022-1382 https://bugzilla.suse.com/1198592 SUSE Bug 1198592 Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. CVE-2022-1383 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1383.html CVE-2022-1383 https://bugzilla.suse.com/1198593 SUSE Bug 1198593 Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. CVE-2022-1437 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1437.html CVE-2022-1437 https://bugzilla.suse.com/1198804 SUSE Bug 1198804 heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.7.0. This vulnerability is capable of inducing denial of service. CVE-2022-1444 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1444.html CVE-2022-1444 https://bugzilla.suse.com/1198805 SUSE Bug 1198805 Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html). CVE-2022-1451 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1451.html CVE-2022-1451 https://bugzilla.suse.com/1198807 SUSE Bug 1198807 Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html). CVE-2022-1452 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1452.html CVE-2022-1452 https://bugzilla.suse.com/1198808 SUSE Bug 1198808 Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0. It is likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/476.html). CVE-2022-1649 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1649.html CVE-2022-1649 https://bugzilla.suse.com/1199418 SUSE Bug 1199418 Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. CVE-2022-1714 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 3.6 AV:L/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1714.html CVE-2022-1714 https://bugzilla.suse.com/1199555 SUSE Bug 1199555 Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0. CVE-2022-1809 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1809.html CVE-2022-1809 https://bugzilla.suse.com/1199806 SUSE Bug 1199806 Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. CVE-2022-1899 openSUSE Tumbleweed:radare2-5.7.0-1.1 openSUSE Tumbleweed:radare2-devel-5.7.0-1.1 openSUSE Tumbleweed:radare2-zsh-completion-5.7.0-1.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-1899.html CVE-2022-1899 https://bugzilla.suse.com/1199972 SUSE Bug 1199972