Command Injection Vulnerability in Radare2 Affects Multiple Versions
CVE-2024-11858

7.8HIGH

Key Information:

Vendor

Radare2

Status
Radare2
Vendor
CVE Published:
15 December 2024

What is CVE-2024-11858?

CVE-2024-11858 is a command injection vulnerability in Radare2 stemming from insufficient input validation when processing Pebble Application files. Attackers can exploit this flaw by crafting malicious inputs to inject shell commands during command parsing. Such exploitation can lead to unauthorized command execution and unintended behavior during file processing. Users of affected versions of Radare2 should apply appropriate security measures and updates to mitigate the risks associated with this vulnerability. For more information, refer to the Red Hat Bugzilla report available at RHBZ#2329102.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://bugzilla.redhat.com/show_bug.cgi?id=2329102

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.