Heap-buffer-overflow in r_core_lines_initcache in radare2
Summary
OSV-2020-317: Heap-buffer-overflow in r_core_lines_initcache. Affects radare2 versions >= 1b0a7bc988c4d327d7090af9757c775f88947e42, < 7d30ff52fc1be6f9698b166107b8981eab6ec7ba. Fixed in 7d30ff52fc1be6f9698b166107b8981eab6ec7ba. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
radare2 is an open-source framework for reverse engineering and analyzing binary files. It provides a set of command-line tools and libraries for disassembling, debugging, and analyzing executable files. The r_core_lines_initcache function in radare2 is responsible for initializing the cache for lines in the disassembly view. This vulnerability in radare2 can lead to a heap-buffer-overflow when writing 8 bytes beyond the allocated buffer.
Vulnerability Detail
The heap-buffer-overflow vulnerability in r_core_lines_initcache can be triggered by a specific input, causing the function to write beyond the allocated buffer. This can result in memory corruption and potentially lead to arbitrary code execution or a denial of service. The vulnerability was discovered through OSS-Fuzz, a continuous fuzzing service for open-source software. The issue has been assigned a severity rating of HIGH.
How To Fix
Minimum fixed version
7d30ff52fc1be6f9698b166107b8981eab6ec7ba
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to update radare2 to a fixed version as soon as possible.
Conclusion
The heap-buffer-overflow vulnerability in r_core_lines_initcache in radare2 can lead to memory corruption and potential code execution or denial of service. It is crucial to update radare2 to a version that includes the fix for this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for radare2 →
FAQ
radare2 is an open-source framework for reverse engineering and analyzing binary files. It provides a set of command-line tools and libraries for disassembling, debugging, and analyzing executable files.
The vulnerability occurs due to a heap-buffer-overflow in the r_core_lines_initcache function, which is responsible for initializing the cache for lines in the disassembly view.
The vulnerability can lead to memory corruption, which may result in arbitrary code execution or a denial of service.
This vulnerability was discovered through OSS-Fuzz, a continuous fuzzing service for open-source software.
This vulnerability has been assigned a severity rating of HIGH.
References
Related vulnerabilities
Recent vulnerabilities recorded for radare2.
