PT-2021-6794 · Rizin · Rizin

Octavio Galland + 1 · Published 2021-11-16 · Updated 2021-12-23 · CVE-2021-43814

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rizin versions up to and including 0.3.1

Description The issue is related to a heap-based out of bounds write in the parse die() function when reversing an AMD64 ELF binary with DWARF debug info. This can cause Rizin to crash or execute unintended actions when a malicious AMD64 ELF binary is opened.

Recommendations For versions up to and including 0.3.1, users are advised to upgrade to a newer version to resolve the issue. As a temporary workaround, consider avoiding the use of the parse die() function when reversing AMD64 ELF binaries with DWARF debug info until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2022-02214

CVE-2021-43814

GHSA-HQQP-VJCM-MW8R

Affected Products

Rizin

References · 10

• https://github.com/rizinorg/rizin/commit/aa6917772d2f32e5a7daab25a46c72df0b5ea406 · Patch
• https://osv.dev/vulnerability/CVE-2021-43814 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43814 · Security Note
• https://bdu.fstec.ru/vul/2022-02214 · Security Note
• https://github.com/rizinorg/rizin/security/advisories/GHSA-hqqp-vjcm-mw8r · Note
• https://github.com/rizinorg/rizin/issues/2083 · Note
• https://vuldb.com/ru/?id.188079 · Note
• https://t.me/cvenotify/24811 · Telegram Post
• https://t.me/cibsecurity/33876 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2022040519 · Note