Upstream information

CVE-2025-1744 at MITRE

Description

Out-of-bounds Write vulnerability in radareorg radare2 allows

heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having critical severity.

CVSS v3 Scores
  SUSE
Base Score 10
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Changed
Confidentiality Impact High
Integrity Impact High
Availability Impact High
CVSSv3 Version 3.1
CVSS v4 Scores
  CNA (cve_disclosure@tech.gov.sg) SUSE
Base Score 10 10
Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network Network
Attack Complexity Low Low
Attack Requirements None None
Privileges Required None None
User Interaction None None
Vulnerable System Confidentiality Impact High High
Vulnerable System Integrity Impact High High
Vulnerable System Availability Impact High High
Subsequent System Confidentiality Impact High High
Subsequent System Integrity Impact High High
Subsequent System Availability Impact High High
CVSSv4 Version 4.0 4.0
SUSE Bugzilla entry: 1238075 [NEW]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Package Hub 15 SP6
  • radare2 >= 5.9.8-bp156.4.9.1
  • radare2-devel >= 5.9.8-bp156.4.9.1
  • radare2-zsh-completion >= 5.9.8-bp156.4.9.1
 Patchnames:
openSUSE-2025-101
openSUSE Leap 15.6
  • radare2 >= 5.9.8-bp156.4.9.1
  • radare2-devel >= 5.9.8-bp156.4.9.1
  • radare2-zsh-completion >= 5.9.8-bp156.4.9.1
 Patchnames:
openSUSE-2025-101

SUSE Timeline for this CVE

CVE page created: Fri Feb 28 06:00:16 2025
CVE page last modified: Mon Mar 24 01:05:41 2025