MGASA-2025-0006 - Updated radare2 packages fix security vulnerability

Publication date: 12 Jan 2025
URL: https://advisories.mageia.org/MGASA-2025-0006.html
Type: security
Affected Mageia releases: 9
CVE: CVE-2024-29645

Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an
attacker to execute arbitrary code via the parse_die function.
(CVE-2024-29645)

References:
- https://bugs.mageia.org/show_bug.cgi?id=33853
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/VM7ZHZ5AWQKW4RJJZ5LN6TSZLENLQ2GZ/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29645

SRPMS:
- 9/core/radare2-5.8.8-1.4.mga9

Mageia 2025-0006: radare2 Security Advisory Updates

Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the parse_die function

Summary

Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the parse_die function. (CVE-2024-29645)

References

- https://bugs.mageia.org/show_bug.cgi?id=33853

- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/VM7ZHZ5AWQKW4RJJZ5LN6TSZLENLQ2GZ/

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29645

Resolution

MGASA-2025-0006 - Updated radare2 packages fix security vulnerability

SRPMS

- 9/core/radare2-5.8.8-1.4.mga9

Severity
Publication date: 12 Jan 2025
URL: https://advisories.mageia.org/MGASA-2025-0006.html
Type: security
CVE: CVE-2024-29645

Related News