PT-2023-27217 · Rizin · Rizin

Ifygecko · Publicado 2023-08-24 · Atualizado 2023-08-30 · CVE-2023-40022

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rizin versions 0.6.0 and prior

Description The issue is related to an integer overflow in the consume count function of src/gnu v2/cplus-dem.c. This overflow occurs because the compiler considers a block of code as unreachable due to a prior multiplication statement, assuming the count will always be a multiple of 10. As a result, the overflow check, although valid, is missing the modulus if the block is compiled.

Recommendations For versions 0.6.0 and prior, update to version 0.6.1 to resolve the issue. As a temporary workaround, consider disabling C++ demangling using the configuration option bin.demangle=false.

Exploit

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2023-40022

GHSA-92H6-WWC2-53CQ

Produtos afetados

Rizin

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40022.json · Exploit
• https://github.com/rizinorg/rizin/pull/3753 · Correção
• https://github.com/rizinorg/rizin/security/advisories/GHSA-92h6-wwc2-53cq · Aviso do Fabricante
• https://github.com/rizinorg/rz-libdemangle/blob/main/src/gnu_v2/cplus-dem.c#L419 · Nota
• https://github.com/rizinorg/rz-libdemangle/commit/51d016750e704b27ab8ace23c0f72acabca67018 · Correção
• https://github.com/rizinorg/rz-libdemangle/pull/54 · Correção
• https://t.me/cibsecurity/69171 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-40022 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-40022 · Nota de Segurança