Heap-buffer-overflow in Elf32_r_bin_elf_compiler in radare2
Summary
OSV-2020-393: Heap-buffer-overflow in Elf32_r_bin_elf_compiler. Affects radare2 versions >= addb2c6507ad2ee3d27e29fe3143cc9c12ef615a, < 9f840c6306b853e98eab75ed2fa9522f7e2dae98. Fixed in 9f840c6306b853e98eab75ed2fa9522f7e2dae98. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
radare2 is an open-source framework for reverse engineering and analyzing binary files. It provides a set of command-line tools and libraries that allow users to examine and manipulate binary files. The Elf32_r_bin_elf_compiler is a component of radare2 that is responsible for compiling ELF (Executable and Linkable Format) files. ELF is a common file format used for executables, object code, shared libraries, and core dumps on Unix-like operating systems. The vulnerability in Elf32_r_bin_elf_compiler can lead to a heap-buffer-overflow, which can result in a crash or potentially allow an attacker to execute arbitrary code.
Vulnerability Detail
The vulnerability in Elf32_r_bin_elf_compiler is a heap-buffer-overflow WRITE 1 issue. This vulnerability occurs when the compiler writes more data into a buffer than it can hold, leading to memory corruption. The specific crash state is within the function 'r_bin_object_set_items' of the 'Elf32_r_bin_elf_compiler' module. This vulnerability was reported through the OSS-Fuzz project, and more details can be found in the provided link. The severity of this vulnerability is classified as HIGH.
How To Fix
Minimum fixed version
9f840c6306b853e98eab75ed2fa9522f7e2dae98
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As this vulnerability has been fixed in the latest version of radare2, there is no specific workaround available. It is recommended to update to the fixed version to ensure the vulnerability is addressed.
Conclusion
The vulnerability in Elf32_r_bin_elf_compiler in radare2 can lead to a heap-buffer-overflow, potentially resulting in crashes or arbitrary code execution. It is recommended to update to the latest version of radare2 that includes the fix for this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for radare2 →
FAQ
radare2 is an open-source framework for reverse engineering and analyzing binary files. It provides a set of command-line tools and libraries for examining and manipulating binary files.
Elf32_r_bin_elf_compiler is a component of radare2 that is responsible for compiling ELF files. ELF is a common file format used for executables, object code, shared libraries, and core dumps on Unix-like operating systems.
A heap-buffer-overflow is a type of memory corruption vulnerability where a program writes more data into a buffer than it can hold, leading to memory corruption and potential crashes or code execution.
This vulnerability was discovered through the OSS-Fuzz project, which is a continuous fuzzing service for open-source software. The specific details of the discovery can be found in the provided link.
This vulnerability is classified as HIGH severity.
References
Related vulnerabilities
Recent vulnerabilities recorded for radare2.
