UAFuzz - Binary-level Directed Fuzzing For Use-After-Free Vulnerabilities

🗓️ 24 Nov 2020 20:30:00Reported by KitPloitType

UAFuzz - Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities. Proposes a directed fuzzer dedicated to Use-After-Free (UAF) bugs at binary-level. It carefully tunes key components of direct fuzzing to meet specific characteristics of this bug class. Fast static precomputation at binary level, introduces new ordering-aware input metrics to guide the fuzzer toward targets at runtime and triages potential inputs covering all targets in the expected trace

Reporter	Title	Published	Views	Family All 231
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Performance Server	31 May 202203:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in GNU Binutils affects Watson Studio Local	20 Dec 201913:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.	23 Jul 202009:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities	1 Nov 202218:28	–	ibm
FreeBSD	patch -- multiple vulnerabilities	16 Apr 201800:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : patch (ALAS-2019-1317)	25 Oct 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : patch (ALAS-2019-1312)	28 Oct 201900:00	–	nessus
Tenable Nessus	CentOS 7 : patch (CESA-2019:2033)	30 Aug 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : binutils (EulerOS-SA-2019-1642)	27 Jun 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : patch (EulerOS-SA-2019-1801)	23 Aug 201900:00	–	nessus

Source	Link
github	www.github.com/binsec/binsec
github	www.github.com/strongcourage/uafbench/blob/master/CVE-2018-20623.sh
github	www.github.com/strongcourage/awesome-directed-fuzzing
github	www.github.com/strongcourage/uafuzz/blob/master/tests/example/example.valgrind
github	www.github.com/rbonichon
github	www.github.com/strongcourage/uafuzz/blob/master/binsec/src/uafuzz/README.md
github	www.github.com/strongcourage/uafbench
github	www.github.com/strongcourage/fuzzing-corpus
github	www.github.com/strongcourage/uafuzz/blob/master/raid20-final286.pdf
github	www.github.com/strongcourage/uafuzz/blob/master/tests/example/example.c

24 Nov 2020 20:30Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 37.5

EPSS0.08716

SSVC