PT-2019-13451 · Nsa · Ghidra

Xiaofen9 · Publicado 2019-07-17 · Atualizado 2019-11-12 · CVE-2019-13623

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 9.1

Description The issue allows path traversal in certain scenarios, potentially enabling attackers to overwrite arbitrary files. This can be achieved by using an archive with an executable file that has an initial ../ in its filename. In some cases, this could lead to arbitrary code execution if critical modules, such as the decompile module, are overwritten.

Recommendations For versions prior to 9.1, update to version 9.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of archives with executable files that have an initial ../ in their filename to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-13623

Produtos afetados

Ghidra

Referências · 7

• 🔥 https://github.com/NationalSecurityAgency/ghidra/issues/789 · Exploit
• 🔥 http://blog.fxiao.me/ghidra · Exploit
• 🔥 https://exploit-db.com/exploits/47231 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-13623 · Nota de Segurança
• https://ghidra-sre.org/releaseNotes_9.1_final.html · Nota
• http://packetstormsecurity.com/files/154015/Ghidra-Linux-9.0.4-Arbitrary-Code-Execution.html · Nota
• https://osv.dev/vulnerability/CVE-2019-13623 · Aviso do Fabricante