Vulnerabilities from radare2 [2022 to 13 Sep 2024]

[wargio]

Tested with ASAN_OPTIONS=verify_asan_link_order=0,detect_leaks=0,allocator_may_return_null=1

Almost all of them require to run only rizin -A <file>

• CVE-2024-26475 not impacted, but we do not use grub_sfs_read_extent
• CVE-2023-47016 not impacted
• CVE-2023-46570 not impacted
• CVE-2023-46569 not impacted
• CVE-2023-5686 not impacted
• CVE-2023-4322 not impacted
• CVE-2023-1605 not impacted
• CVE-2023-0302 not impacted
• CVE-2022-4843 not impacted
• CVE-2022-4398 not impacted
• CVE-2022-1899 not impacted
• CVE-2022-1809 not impacted
• CVE-2022-1714 not impacted
• CVE-2022-1649 not impacted
• CVE-2022-1452 not impacted
• CVE-2022-1451 not impacted
• CVE-2022-1444 not impacted, binary not available, but we do not use new_rbtree.c
• CVE-2022-1437 not impacted, but ASAN is not happy due pointer math (fixed 16fa016).
• CVE-2022-1383 not impacted
• CVE-2022-1382 not impacted
• CVE-2022-1297 not impacted, binaries not available, checked the code and we are not vulnerable.
• CVE-2022-1296 not impacted
• CVE-2022-1284 not impacted, binary not available, checked the code and we are not vulnerable.
• CVE-2022-1283 not impacted, binary not available, checked the code and we are not vulnerable.
• CVE-2022-1244 not impacted, binary not available, checked the code and we are not vulnerable.
• CVE-2022-1240 not impacted
• CVE-2022-1238 not impacted
• CVE-2022-1237 not impacted
• CVE-2022-1207 Vulnerable, binary not available (fixed d167921).
• CVE-2022-1061 not impacted
• CVE-2022-1052 not impacted
• CVE-2022-1031 not impacted
• CVE-2022-0849 not impacted
• CVE-2022-0713 not impacted
• CVE-2022-0712 not impacted
• CVE-2022-0695 not impacted
• CVE-2022-0676 not impacted
• CVE-2022-0559 not impacted
• CVE-2022-0523 not impacted
• CVE-2022-0522 not impacted
• CVE-2022-0521 not impacted
• CVE-2022-0520 not impacted
• CVE-2022-0519 not impacted
• CVE-2022-0518 not impacted
• CVE-2022-0476 not impacted
• CVE-2022-0419 not impacted
• CVE-2022-0173 not impacted
• CVE-2022-0139 not impacted

[wargio]

#4631