Bug 2182467 (CVE-2023-27114) - CVE-2023-27114 radare2: Segmentation fault via the component wasm_dis at p/wasm/wasm.c
Summary: CVE-2023-27114 radare2: Segmentation fault via the component wasm_dis at p/wa...
Keywords:
Status: CLOSED UPSTREAM
Alias: CVE-2023-27114
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2182468 2182469
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-03-28 18:33 UTC by Pedro Sampaio
Modified: 2023-07-05 06:45 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-03-28 22:32:48 UTC
Embargoed:

Attachments (Terms of Use)

Description Pedro Sampaio 2023-03-28 18:33:51 UTC 
radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c.

https://github.com/radareorg/radare2/commit/13308c9aad79f9c7a3507ce549fe270103e8ceea
https://github.com/radareorg/radare2/issues/21363
Comment 1 Pedro Sampaio 2023-03-28 18:34:08 UTC 
Created radare2 tracking bugs for this issue:

Affects: epel-all [bug 2182469]
Affects: fedora-all [bug 2182468]
Comment 2 Product Security DevOps Team 2023-03-28 22:32:46 UTC 
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.
Comment 3 Michal Ambroz 2023-07-05 06:45:08 UTC 
fixed in 5.8.4
Note You need to log in before you can comment on or make changes to this bug.