PT-2021-24036 · Unknown · Unicorn Engine

Jwang · Published 2021-12-26 · Updated 2022-01-07 · CVE-2021-44078

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Unicorn Engine versions prior to 2.0.0-rc5

Description: The issue is related to the virtual memory manager, specifically in the split region function in uc.c. It allows local attackers to escape the sandbox by exploiting a faulty comparison of GVA and GPA while calling uc mem map ptr to free part of a claimed memory block. This can lead to the execution of arbitrary code on the host machine. An attacker must first obtain the ability to execute crafted code in the target sandbox.

Recommendations: For versions prior to 2.0.0-rc5, update to version 2.0.0-rc5 or later to resolve the issue. As a temporary workaround, consider restricting access to the uc mem map ptr function to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-697

Related Identifiers

CVE-2021-44078

PYSEC-2021-868

Affected Products

Unicorn Engine

References · 8

• https://github.com/unicorn-engine/unicorn/compare/2.0.0-rc4...2.0.0-rc5 · Patch
• https://github.com/unicorn-engine/unicorn/commit/c733bbada356b0373fa8aa72c044574bb855fd24 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-44078 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-868 · Vendor Advisory
• https://unicorn-engine.org/changelog · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-44078 · Vendor Advisory
• https://github.com/jwang-a/CTF/blob/master/MyChallenges/Pwn/Unicorns_Aisle/UnicornsAisle.pdf · Note
• https://gist.github.com/jwang-a/cb4b6e9551457aa299066076b836a2cd · Note