Nixpkgs Security Tracker

Login with GitHub

Suggestions search

All statuses
Filter by:
With package: radare2

Found 6 matching suggestions

View:
Compact
Detailed
Published
Permalink CVE-2026-4174
3.3 LOW
  • CVSS version: 3.1
  • Attack vector (AV):
  • Attack complexity (AC):
  • Privileges required (PR):
  • User interaction (UI):
  • Scope (S):
  • Confidentiality impact (C):
  • Integrity impact (I):
  • Availability impact (A):
updated 1 week, 6 days ago by @LeSuisse Activity log
  • Created automatic suggestion 2 weeks ago
  • @LeSuisse accepted 2 weeks ago
  • @LeSuisse published on GitHub 1 week, 6 days ago
Radare2 Mach-O File mach0.c walk_exports_trie resource consumption

A vulnerability has been found in Radare2 5.9.9. This issue affects the function walk_exports_trie of the file libr/bin/format/mach0/mach0.c of the component Mach-O File Parser. Such manipulation leads to resource consumption. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The existence of this vulnerability is still disputed at present. Upgrading to version 6.1.2 is capable of addressing this issue. The name of the patch is 4371ae84c99c46b48cb21badbbef06b30757aba0. You should upgrade the affected component. The code maintainer states that, "[he] wont consider this bug a DoS".

References

Affected products

Radare2
  • ==5.9.9
  • ==6.1.2

Matching in nixpkgs

Package maintainers

Upstream issue: https://github.com/radareorg/radare2/issues/25482
Upstream patch: https://github.com/radareorg/radare2/commit/4371ae84c99c46b48cb21badbbef06b30757aba0

Upstream disputes the security issue: https://github.com/radareorg/radare2/issues/25482#issuecomment-3989318217
Untriaged
Permalink CVE-2024-11858
8.6 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): REQUIRED
  • Scope (S): CHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): HIGH
  • Availability impact (A): HIGH
created 6 months, 1 week ago
Radare2: command injection via pebble application files in radare2

A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing​

References

Affected products

radare2
  • <5.9.9

Matching in nixpkgs

pkgs.radare2

UNIX-like reverse engineering framework and command-line toolset

  • nixos-unstable -

Package maintainers

Untriaged
Permalink CVE-2023-25585
4.7 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): HIGH
  • Privileges required (PR): NONE
  • User interaction (UI): REQUIRED
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): NONE
  • Availability impact (A): HIGH
created 6 months, 1 week ago
Field `file_table` of `struct module *module` is uninitialized

A flaw was found in Binutils. The use of an uninitialized field in the struct module *module may lead to application crash and local denial of service.

References

Affected products

rizin
insight
radare2
binutils
mingw-binutils
gcc-toolset-11-binutils
gcc-toolset-12-binutils

Matching in nixpkgs

pkgs.rizin

UNIX-like reverse engineering framework and command-line toolset

  • nixos-unstable -

pkgs.radare2

UNIX-like reverse engineering framework and command-line toolset

  • nixos-unstable -

pkgs.bintools

System binary utilities (wrapper script)

  • nixos-unstable -

pkgs.binutils

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -

pkgs.binutilsNoLibc

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -

pkgs.cargo-binutils

Cargo subcommands to invoke the LLVM tools shipped with the Rust toolchain

  • nixos-unstable -

pkgs.binutils_nogold

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -

pkgs.binutils-unwrapped

Tools for manipulating binaries (linker, assembler, etc.)

  • nixos-unstable -

Package maintainers

Untriaged
Permalink CVE-2023-25584
6.3 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): HIGH
  • Privileges required (PR): NONE
  • User interaction (UI): REQUIRED
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): NONE
  • Availability impact (A): HIGH
created 6 months, 1 week ago
Out of bounds read in parse_module function in bfd/vms-alpha.c

An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.

References

Affected products

rizin
insight
radare2
binutils
mingw-binutils
gcc-toolset-11-gdb
gcc-toolset-12-gdb
gcc-toolset-11-binutils
gcc-toolset-12-binutils

Matching in nixpkgs

pkgs.rizin

UNIX-like reverse engineering framework and command-line toolset

  • nixos-unstable -

pkgs.radare2

UNIX-like reverse engineering framework and command-line toolset

  • nixos-unstable -

pkgs.bintools

System binary utilities (wrapper script)

  • nixos-unstable -

pkgs.binutils

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -

pkgs.binutilsNoLibc

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -

pkgs.cargo-binutils

Cargo subcommands to invoke the LLVM tools shipped with the Rust toolchain

  • nixos-unstable -

pkgs.binutils_nogold

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -

pkgs.binutils-unwrapped

Tools for manipulating binaries (linker, assembler, etc.)

  • nixos-unstable -

Package maintainers

Untriaged
Permalink CVE-2023-25588
4.7 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): HIGH
  • Privileges required (PR): NONE
  • User interaction (UI): REQUIRED
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): NONE
  • Availability impact (A): HIGH
created 6 months, 1 week ago
Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`

A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service.

References

Affected products

rizin
insight
radare2
binutils
mingw-binutils
gcc-toolset-11-binutils
gcc-toolset-12-binutils

Matching in nixpkgs

pkgs.rizin

UNIX-like reverse engineering framework and command-line toolset

  • nixos-unstable -

pkgs.radare2

UNIX-like reverse engineering framework and command-line toolset

  • nixos-unstable -

pkgs.bintools

System binary utilities (wrapper script)

  • nixos-unstable -

pkgs.binutils

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -

pkgs.binutilsNoLibc

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -

pkgs.cargo-binutils

Cargo subcommands to invoke the LLVM tools shipped with the Rust toolchain

  • nixos-unstable -

pkgs.binutils_nogold

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -

pkgs.binutils-unwrapped

Tools for manipulating binaries (linker, assembler, etc.)

  • nixos-unstable -

Package maintainers

Untriaged
Permalink CVE-2023-25586
4.7 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): HIGH
  • Privileges required (PR): NONE
  • User interaction (UI): REQUIRED
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): NONE
  • Availability impact (A): HIGH
created 6 months, 1 week ago
Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized

A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause a crash and local denial of service.

References

Affected products

gdb
rizin
insight
radare2
binutils
mingw-binutils
gcc-toolset-11-gdb
gcc-toolset-12-gdb
gcc-toolset-11-binutils
gcc-toolset-12-binutils

Matching in nixpkgs

pkgs.gdb

GNU Project debugger

  • nixos-unstable -

pkgs.cgdb

Curses interface to gdb

  • nixos-unstable -

pkgs.gdbm

GNU dbm key/value database library

  • nixos-unstable -

pkgs.rizin

UNIX-like reverse engineering framework and command-line toolset

  • nixos-unstable -

pkgs.xxgdb

Simple but powerful graphical interface to gdb

  • nixos-unstable -

pkgs.gdbgui

Browser-based frontend for GDB

pkgs.eggdbus

D-Bus bindings for GObject

  • nixos-unstable -

pkgs.gdbuspp

GDBus++ - a glib2 D-Bus wrapper for C++

  • nixos-unstable -
    • nixpkgs-unstable 3

pkgs.radare2

UNIX-like reverse engineering framework and command-line toolset

  • nixos-unstable -

pkgs.sgdboop

Applying custom artwork to Steam, using SteamGridDB

  • nixos-unstable -

pkgs.bintools

System binary utilities (wrapper script)

  • nixos-unstable -

pkgs.binutils

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -

pkgs.gdb-dashboard

Modular visual interface for GDB in Python

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.binutilsNoLibc

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -

pkgs.cargo-binutils

Cargo subcommands to invoke the LLVM tools shipped with the Rust toolchain

  • nixos-unstable -

pkgs.binutils_nogold

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -

pkgs.binutils-unwrapped

Tools for manipulating binaries (linker, assembler, etc.)

  • nixos-unstable -

pkgs.cudaPackages.cuda_gdb

CUDA GDB. By downloading and using the packages you accept the terms and conditions of the CUDA EULA

Package maintainers