CVE-2021-32494 - OpenCVE

Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Radare	Radare2

Configuration 1 [-]

cpe:2.3:a:radare:radare2:5.3.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/radareorg/radare2/commit/a07dedb804a82bc01c07072861942dd80c6b6d62
https://github.com/radareorg/radare2/issues/18667

History

No history.

MITRE

Status: PUBLISHED

Assigner: fedora

Published: 2023-07-07T18:20:40.510Z

Updated: 2024-08-03T23:17:29.561Z

Reserved: 2021-05-10T18:31:31.213Z

Link: CVE-2021-32494

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2023-07-07T19:15:09.507

Modified: 2023-07-13T18:37:47.170

Link: CVE-2021-32494

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-32494", "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "state": "PUBLISHED", "assignerShortName": "fedora", "dateReserved": "2021-05-10T18:31:31.213Z", "datePublished": "2023-07-07T18:20:40.510Z", "dateUpdated": "2024-08-03T23:17:29.561Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "shortName": "fedora", "dateUpdated": "2023-07-07T18:20:40.510Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-369", "description": "CWE-369 Divide By Zero", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-130", "descriptions": [{"lang": "en", "value": "CAPEC-130 Excessive Allocation"}]}], "affected": [{"vendor": "radare2", "product": "radare2", "versions": [{"status": "affected", "version": "5.3.0-git 26142"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service.\n\n\n", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<pre>Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service.\n</pre>"}]}], "references": [{"url": "https://github.com/radareorg/radare2/issues/18667"}, {"url": "https://github.com/radareorg/radare2/commit/a07dedb804a82bc01c07072861942dd80c6b6d62"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "CRITICAL", "baseScore": 10, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T23:17:29.561Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/radareorg/radare2/issues/18667", "tags": ["x_transferred"]}, {"url": "https://github.com/radareorg/radare2/commit/a07dedb804a82bc01c07072861942dd80c6b6d62", "tags": ["x_transferred"]}]}]}}