CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-36043 – Rizin Double Free in bobj.c when using qnx binary plugin
https://notcve.org/view.php?id=CVE-2022-36043
06 Sep 2022 — Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to a double free in bobj.c:rz_bin_reloc_storage_free() when freeing relocations generated from qnx binary plugin. A user opening a malicious qnx binary could be affected by this vulnerability, allowing an attacker to execute code on the user's machine. Commit number a3d50c1ea185f3f642f2d8180715f82d98840784 contains a patch for this issue. Rizin es un marco de trabajo de ingeniería inversa tip... • https://github.com/rizinorg/rizin/commit/a3d50c1ea185f3f642f2d8180715f82d98840784 • CWE-415: Double Free •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-36044 – Rizin Out-of-bounds Write vulnerability in Lua binary plugin
https://notcve.org/view.php?id=CVE-2022-36044
06 Sep 2022 — Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from Luac files. A user opening a malicious Luac file could be affected by this vulnerability, allowing an attacker to execute code on the user's machine. Commits 07b43bc8aa1ffebd9b68d60624c9610cf7e460c7 and 05bbd147caccc60162d6fba9baaaf24befa281cd contain fixes for the issue. Rizin es un framework de ingeniería inversa de tipo UNIX y un conjunto de... • https://github.com/rizinorg/rizin/commit/05bbd147caccc60162d6fba9baaaf24befa281cd • CWE-787: Out-of-bounds Write •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2021-4022
https://notcve.org/view.php?id=CVE-2021-4022
25 Aug 2022 — A vulnerability was found in rizin. The bug involves an ELF64 binary for the HPPA architecture. When a specially crafted binarygets analysed by rizin, it causes rizin to crash by freeing an uninitialized (and potentially user controlled, depending on the build) memory address. Se ha encontrado una vulnerabilidad en rizin. El fallo afecta a un binario ELF64 para la arquitectura HPPA. • https://github.com/rizinorg/rizin/issues/2015 • CWE-400: Uncontrolled Resource Consumption CWE-416: Use After Free •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2022-34612 – Gentoo Linux Security Advisory 202209-06
https://notcve.org/view.php?id=CVE-2022-34612
27 Jul 2022 — Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted binary. Se ha detectado que Rizin versiones v0.4.0 y anteriores, contienen un desbordamiento de enteros por medio de la función get_long_object(). Esta vulnerabilidad permite a atacantes causar una denegación de servicio (DoS) por medio de un binario diseñado Multiple vulnerabilities have been discovered in Rizin, the wo... • https://github.com/rizinorg/rizin/issues/2738 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-43814 – Heap-based OOB write when parsing dwarf DIE info in Rizin
https://notcve.org/view.php?id=CVE-2021-43814
13 Dec 2021 — Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bounds write in parse_die() when reversing an AMD64 ELF binary with DWARF debug info. When a malicious AMD64 ELF binary is opened by a victim user, Rizin may crash or execute unintended actions. No workaround are known and users are advised to upgrade. Rizin es un marco de trabajo de ingeniería inversa de tipo UNIX y un conjunto de herramientas de línea de comandos.... • https://github.com/rizinorg/rizin/commit/aa6917772d2f32e5a7daab25a46c72df0b5ea406 • CWE-787: Out-of-bounds Write •