PT-2019-13451 · Nsa · Ghidra

Xiaofen9 · Published 2019-07-17 · Updated 2019-11-12 · CVE-2019-13623

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 9.1

Description The issue allows path traversal in certain scenarios, potentially enabling attackers to overwrite arbitrary files. This can be achieved by using an archive with an executable file that has an initial ../ in its filename. In some cases, this could lead to arbitrary code execution if critical modules, such as the decompile module, are overwritten.

Recommendations For versions prior to 9.1, update to version 9.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of archives with executable files that have an initial ../ in their filename to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-13623

Affected Products

Ghidra

References · 7

• 🔥 https://github.com/NationalSecurityAgency/ghidra/issues/789 · Exploit
• 🔥 http://blog.fxiao.me/ghidra · Exploit
• 🔥 https://exploit-db.com/exploits/47231 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-13623 · Security Note
• https://osv.dev/vulnerability/CVE-2019-13623 · Vendor Advisory
• https://ghidra-sre.org/releaseNotes_9.1_final.html · Note
• http://packetstormsecurity.com/files/154015/Ghidra-Linux-9.0.4-Arbitrary-Code-Execution.html · Note