CVE-2021-3673

Name
CVE-2021-3673
Description
A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can lead to resource exhaustion and DoS.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://bugzilla.redhat.com/show_bug.cgi?id=1989130
FEDORA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIARALLVVY2362AYFSFULTZKIW6QO5R5/
FEDORA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XGOU2EFE7YK2YDRNFV6QFUWW2SL2GGQA/
FEDORA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NFQPEPMLAOQNGZG5OHSPZBNONGG4DDJO/
Mailing List https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IQIRJ72UALGMSWH6MYPVJQQLXFGZ23RS/
Mailing List https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SKGIB52R4XPCPNEW6GF56EHW7ST24IJU/

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:radare:radare2:5.3.1:*:*:*:*:*:*:* radare2 == None == 5.3.1

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
radare2 edge-community 5.4.0-r0 Valery Kartel <valery.kartel@gmail.com> fixed
radare2 edge-community 5.3.1-r0 Valery Kartel <valery.kartel@gmail.com> possibly vulnerable
radare2 3.22-community 5.4.0-r0 None fixed
radare2 3.22-community 5.3.1-r0 None possibly vulnerable
radare2 3.21-community 5.4.0-r0 None fixed
radare2 3.20-community 5.4.0-r0 None fixed
radare2 3.19-community 5.4.0-r0 None fixed
radare2 3.18-community 5.4.0-r0 None fixed