How many CVEs have a located fix in radare/radare2?

41 published CVEs have a fix traced to functions in radare/radare2, touching 55 functions across 35 files.

Which function in radare/radare2 has been patched by the most CVEs?

store_versioninfo_gnu_verdef in libr/bin/format/elf/elf.c has been changed by 4 CVE fixes, from 2017 to 2017.

How large is a typical CVE fix in radare/radare2?

The median fix changes 8 lines. 83% of fixes change 20 lines or fewer, and 63% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

shell

#103 of 500 repositories

radare/radare2

Name: radare/radare2: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix August 7, 2019

41

CVE fixes located

Published CVEs

55

Functions patched

Distinct function sites

35

Files patched

Distinct source files

2017–2019

Years covered

By CVE publication date

Overview

41 published CVEs have a fix traced to functions in radare/radare2, the earliest published in 2017. Those fixes changed 55 distinct functions across 35 files, in 189 patch hunks.

Among the 500 repositories tracked here, radare/radare2 ranks #103 by the number of CVEs with a located fix.

Most patched functions

Functions in radare/radare2 changed by the most CVE fixes.

Most patched files

Files in radare/radare2 changed by the most CVE fixes.

1libr/bin/format/elf/elf.c5 CVEs · 2 functions
2libr/asm/p/asm_x86_nz.c4 CVEs · 3 functions
3libr/anal/p/anal_avr.c4 CVEs · 1 functions
4libr/bin/p/bin_dex.c3 CVEs · 3 functions
5libr/core/cbin.c3 CVEs · 3 functions
6libr/bin/format/mach0/mach0.c2 CVEs · 3 functions
7libr/core/cmd_anal.c2 CVEs · 2 functions
8shlr/grub/fs/ext2.c2 CVEs · 2 functions
9sys/rebuild.sh2 CVEs · 2 functions
10libr/asm/arch/wasm/wasm.c2 CVEs · 1 functions

Fix size

How much code a CVE fix in radare/radare2 changes, with backports counted once.

8

Median lines changed

Added plus removed, per CVE

83%

Fixes of 20 lines or fewer

Share of CVE fixes

63%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in radare/radare2, and the functions each fix changed.

CVE-2019-14745
CVE-2019-14745bin_symbols
High · CVSS 7.8
EPSS 4.5%2019-08-07
CVE-2018-20456
CVE-2018-20456parseOperand
Medium · CVSS 5.5
EPSS 1.0%2018-12-25
CVE-2018-20461
CVE-2018-20461core_anal_bytes
Medium · CVSS 5.5
EPSS 1.0%2018-12-25
CVE-2018-20460
CVE-2018-20460parseOperands
Medium · CVSS 5.5
EPSS 1.1%2018-12-25
CVE-2018-20455
CVE-2018-20455parseOperand
Medium · CVSS 5.5
EPSS 1.1%2018-12-25
CVE-2018-19843
CVE-2018-19843opmov
Medium · CVSS 5.5
EPSS 1.0%2018-12-04
CVE-2018-19842
CVE-2018-19842getToken
Medium · CVSS 5.5
EPSS 1.0%2018-12-04
CVE-2018-15834
CVE-2018-15834read_module_referenced_functions
Medium · CVSS 5.5
EPSS 1.0%2018-09-12
CVE-2018-12322
CVE-2018-12322_6502_op
Medium · CVSS 5.5
EPSS 0.9%2018-06-13
CVE-2018-12320
CVE-2018-12320r_anal_bb_free
High · CVSS 7.8
EPSS 1.0%2018-06-13
CVE-2018-12321
CVE-2018-12321java_switch_op
High · CVSS 7.8
EPSS 1.0%2018-06-13
CVE-2018-11380
CVE-2018-11380parse_import_ptr
Medium · CVSS 5.5
EPSS 0.9%2018-05-22

Get an alert for each new radare/radare2 CVE, with the patched functions and AI-written analysis.

Monitor radare2 CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

zitadel/zitadel41 CVEs aio-libs/aiohttp42 CVEs directus/directus42 CVEs freescout-help-desk/freescout42 CVEs getgrav/grav42 CVEs openstack/nova42 CVEs apache/struts40 CVEs Exiv2/exiv240 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in radare/radare2.

How many CVEs have a located fix in radare/radare2?: 41 published CVEs have a fix traced to functions in radare/radare2, touching 55 functions across 35 files.
Which function in radare/radare2 has been patched by the most CVEs?: store_versioninfo_gnu_verdef in libr/bin/format/elf/elf.c has been changed by 4 CVE fixes, from 2017 to 2017.
How large is a typical CVE fix in radare/radare2?: The median fix changes 8 lines. 83% of fixes change 20 lines or fewer, and 63% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track radare/radare2 CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing