OSV-2023-974

    Dashboard / Vulnerabilities / OSV-2023-974

    OSV-2023-974

    Published: 7 Oct 2023Last Modified: 7 Oct 2023

    Summary: UNKNOWN READ in r_str_ncpy

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63030 ``` Crash type: UNKNOWN READ Crash state: r_str_ncpy Elf64_load_symbols_from Elf64_load_symbols ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63030

    Affected packages

    Package

    Name: radare2

    Purl: pkg:generic/radare2

    Affected ranges

    Type: GIT

    Events:

    Introduced- 71fe0470e5b64572c4629bf2ed33bcf4b62d9322
    Fixed -59806217f8fdadd4de7d0edab81c40442d9aec75

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-974 | CVE-DB