Bug 2057711 (CVE-2022-0476)

Summary:	CVE-2022-0476 radare2: DoS caused by a malformed mdmp file
Product:	[Other] Security Response	Reporter:	Anten Skrabec <askrabec>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED UPSTREAM	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	henrik, rebus
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-03-03 00:20:05 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2057712, 2057713, 2057714, 2057715
Bug Blocks:

Description Anten Skrabec 2022-02-23 21:25:29 UTC

Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.
A malformed mdmp file causes a DoS attack and leads to resource exhaustion.

https://github.com/radareorg/radare2/commit/27fe8031782d3a06c3998eaa94354867864f9f1b
https://huntr.dev/bounties/81ddfbda-6c9f-4b69-83ff-85b15141e35d

Comment 1 Anten Skrabec 2022-02-23 21:25:55 UTC

Created radare2 tracking bugs for this issue:

Affects: epel-7 [bug 2057714]
Affects: epel-8 [bug 2057715]
Affects: fedora-34 [bug 2057712]
Affects: fedora-35 [bug 2057713]

Comment 2 Product Security DevOps Team 2022-03-03 00:20:03 UTC

This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.