An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grub_sfs_read_extent function.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Radare2 | Radare | 0.9.7 (including) | 5.8.8 (excluding) |
| Radare2 | Ubuntu | focal | * |
| Radare2 | Ubuntu | mantic | * |
| Radare2 | Ubuntu | oracular | * |
| Radare2 | Ubuntu | plucky | * |