PT-2022-23138 · Rizin · Rizin

M4Drat · Published 2022-09-06 · Updated 2023-03-30 · CVE-2022-36043

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rizin versions 0.4.0 and prior

Description The issue is related to a double free in bobj.c:rz bin reloc storage free() when freeing relocations generated from qnx binary plugin. A user opening a malicious qnx binary could be affected, allowing an attacker to execute code on the user's machine.

Recommendations For versions 0.4.0 and prior, apply the patch contained in commit number a3d50c1ea185f3f642f2d8180715f82d98840784 to resolve the issue. As a temporary workaround, consider avoiding the use of the qnx binary plugin until the patch is applied.

Exploit

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2022-36043

GHSA-RJHV-MJ4G-J4P5

Affected Products

Rizin

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/36xxx/CVE-2022-36043.json · Exploit
• https://github.com/rizinorg/rizin/commit/a3d50c1ea185f3f642f2d8180715f82d98840784 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-36043 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQZLMHEI5D7EJASA5UW6XN4ODHLRHK6N · Vendor Advisory
• https://security.gentoo.org/glsa/202209-06 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-36043 · Vendor Advisory
• https://github.com/rizinorg/rizin/security/advisories/GHSA-rjhv-mj4g-j4p5 · Note
• https://github.com/rizinorg/rizin/issues/2964 · Note
• https://t.me/cvenotify/47151 · Telegram Post
• https://t.me/cvenotify/35955 · Telegram Post
• https://t.me/cibsecurity/49376 · Telegram Post