PT-2023-6136 · Unknown+1 · Open Babel+1

Claudio Bozzato · Published 2023-07-21 · Updated 2023-07-27 · CVE-2022-46289

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open Babel versions 3.1.1 and prior

Description The issue is related to the nAtoms functionality in the ORCA format of Open Babel, which is associated with an out-of-bounds write operation in memory. This can be exploited by a remote attacker using a specially crafted file, potentially leading to arbitrary code execution. The nAtoms calculation can wrap around, resulting in a small buffer allocation.

Recommendations For Open Babel version 3.1.1, consider disabling the nAtoms functionality in the ORCA format until a patch is available. For versions prior to 3.1.1, restrict the use of the ORCA format to minimize the risk of exploitation. As a temporary workaround, avoid using the nAtoms functionality with untrusted or malicious files until the issue is resolved.

Exploit

Fix

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

BDU:2023-06842

CVE-2022-46289

Affected Products

Debian

Open Babel

References · 10

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2022-1665 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-46289 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-46289 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-46289 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-46289 · Security Note
• https://bdu.fstec.ru/vul/2023-06842 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-46289 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-46289 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-46289 · Vendor Advisory
• https://t.me/cvenotify/54956 · Telegram Post