PT-2022-22244 · Rizin · Rizin

Published 2022-07-27 · Updated 2023-03-30 · CVE-2022-34612

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Rizin versions 0.4.0 and below

Description The issue is related to an integer overflow via the function get long object(). This allows attackers to cause a Denial of Service (DoS) via a crafted binary.

Recommendations For Rizin versions 0.4.0 and below, consider updating to a version above 0.4.0 to resolve the issue. As a temporary workaround, consider restricting the use of the get long object() function until a patch is available.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2022-34612

Affected Products

Rizin

References · 10

• 🔥 https://github.com/rizinorg/rizin/issues/2738 · Exploit
• https://github.com/rizinorg/rizin/pull/2739 · Patch
• https://osv.dev/vulnerability/CVE-2022-34612 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQZLMHEI5D7EJASA5UW6XN4ODHLRHK6N · Vendor Advisory
• https://security.gentoo.org/glsa/202209-06 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34612 · Security Note
• https://t.me/cibsecurity/47056 · Telegram Post
• https://t.me/cvenotify/33820 · Telegram Post
• https://t.me/cvenotify/47148 · Telegram Post
• https://t.me/cvenotify/33815 · Telegram Post