Bug 2221284 (CVE-2021-32495) - CVE-2021-32495 radare2: Use after free vulnerability in pyc parser's get_none_object function
Summary: CVE-2021-32495 radare2: Use after free vulnerability in pyc parser's get_none...
Keywords:
Status: CLOSED UPSTREAM
Alias: CVE-2021-32495
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2221285 2221286
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-07-07 18:24 UTC by Pedro Sampaio
Modified: 2023-10-26 11:20 UTC (History)
1 user (show)

Fixed In Version: radare2 5.3.0-git 26255
Clone Of:
Environment:
Last Closed: 2023-07-07 22:46:49 UTC
Embargoed:

Attachments (Terms of Use)

Description Pedro Sampaio 2023-07-07 18:24:10 UTC 
Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.

References:

https://github.com/radareorg/radare2/issues/18666
https://github.com/radareorg/radare2/commit/5e16e2d1c9fe245e4c17005d779fde91ec0b9c05
Comment 1 Pedro Sampaio 2023-07-07 18:24:26 UTC 
Created radare2 tracking bugs for this issue:

Affects: epel-all [bug 2221286]
Affects: fedora-all [bug 2221285]
Comment 2 Product Security DevOps Team 2023-07-07 22:46:48 UTC 
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.
Comment 3 Michal Ambroz 2023-10-26 11:20:14 UTC 
https://github.com/radareorg/radare2/commit/5e16e2d1c9fe245e4c17005d779fde91ec0b9c05
fixed since release 5.3.0
Note You need to log in before you can comment on or make changes to this bug.