825 matches found
Out-of-bounds
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when parsing Mach-O files. A user opening a malicious Mach-O file could be affected by this vulnerability, allowing an attacker to execute code on the...
CVE-2022-36041: Out-of-bounds Write
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when parsing Mach-O files. A user opening a malicious Mach-O file could be affected by this vulnerability, allowing an attacker to execute code on the...
CVE-2022-36041
CVE-2022-36041 affects Rizin, a UNIX-like reverse engineering framework. The vulnerability is an out-of-bounds write when parsing Mach-O files in versions 0.4.0 and prior. A user opening a malicious Mach-O could allow code execution on the attacker’s machine. A patch is available in commit 7323e6...
PT-2022-23137 · Rizin · Rizin
Name of the Vulnerable Software and Affected Versions: Rizin versions 0.4.0 and prior Description: The issue is related to an out-of-bounds write when parsing Mach-O files. A user opening a malicious Mach-O file could be affected, allowing an attacker to execute code on the user's machine...
CVE-2022-36041 Rizin Out-of-bounds Write vulnerability in Mach-O binary plugin
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when parsing Mach-O files. A user opening a malicious Mach-O file could be affected by this vulnerability, allowing an attacker to execute code on the...
Rizin 缓冲区错误漏洞
Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. A security vulnerability exist...
CVE-2022-36041 Rizin Out-of-bounds Write vulnerability in Mach-O binary plugin
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when parsing Mach-O files. A user opening a malicious Mach-O file could be affected by this vulnerability, allowing an attacker to execute code on the...
CVE-2022-36041 Rizin Out-of-bounds Write vulnerability in Mach-O binary plugin
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when parsing Mach-O files. A user opening a malicious Mach-O file could be affected by this vulnerability, allowing an attacker to execute code on the...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the getle64 function in bele.h via a crafted Mach-O file. Remediation Upgrade upx to version 4.2.1 or higher. References - GitHub Commit - GitHub Issue Credit: giantbranch of NSFOCUS Security Team...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS in the elflookup function in plxelf.cpp via a crafted Mach-O file. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike...
Improper Restriction of Operations within the Bounds of a Memory Buffer
Overview Affected versions of this package are vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer in the elflookup function in plxelf.cpp via a crafted Mach-O file. Remediation Upgrade upx to version or higher. References - GitHub Commit - GitHub Issue Credit:...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the invertptdynamic function in plxelf.cpp a crafted Mach-O file. Remediation Upgrade upx to version 4.2.1 or higher. References - GitHub Commit - GitHub Commit - GitHub Issue Credit: giantbranch of NSFOCUS...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the accuagetbe32 function in miniacc.h via a crafted Mach-O file. Remediation Upgrade upx to version 4.2.1 or higher. References - GitHub Commit - GitHub Issue Credit: giantbranch of NSFOCUS Security Team...
CVE-2020-27799
A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27802
An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...
DEBIAN-CVE-2020-27801
A heap-based buffer over-read was discovered in the getle64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...
DEBIAN-CVE-2020-27799
A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27799
A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...