CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2021-4022
https://notcve.org/view.php?id=CVE-2021-4022
A vulnerability was found in rizin. The bug involves an ELF64 binary for the HPPA architecture. When a specially crafted binarygets analysed by rizin, it causes rizin to crash by freeing an uninitialized (and potentially user controlled, depending on the build) memory address. Se ha encontrado una vulnerabilidad en rizin. El fallo afecta a un binario ELF64 para la arquitectura HPPA. • https://github.com/rizinorg/rizin/issues/2015 • CWE-400: Uncontrolled Resource Consumption CWE-416: Use After Free •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2022-34612
https://notcve.org/view.php?id=CVE-2022-34612
Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted binary. Se ha detectado que Rizin versiones v0.4.0 y anteriores, contienen un desbordamiento de enteros por medio de la función get_long_object(). Esta vulnerabilidad permite a atacantes causar una denegación de servicio (DoS) por medio de un binario diseñado • https://github.com/rizinorg/rizin/issues/2738 https://github.com/rizinorg/rizin/pull/2739 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQZLMHEI5D7EJASA5UW6XN4ODHLRHK6N https://security.gentoo.org/glsa/202209-06 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-43814 – Heap-based OOB write when parsing dwarf DIE info in Rizin
https://notcve.org/view.php?id=CVE-2021-43814
Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bounds write in parse_die() when reversing an AMD64 ELF binary with DWARF debug info. When a malicious AMD64 ELF binary is opened by a victim user, Rizin may crash or execute unintended actions. No workaround are known and users are advised to upgrade. Rizin es un marco de trabajo de ingeniería inversa de tipo UNIX y un conjunto de herramientas de línea de comandos. • https://github.com/rizinorg/rizin/commit/aa6917772d2f32e5a7daab25a46c72df0b5ea406 https://github.com/rizinorg/rizin/issues/2083 https://github.com/rizinorg/rizin/security/advisories/GHSA-hqqp-vjcm-mw8r • CWE-787: Out-of-bounds Write •