Heap-buffer-overflow in read_reloc in radare2
Summary
OSV-2020-64: Heap-buffer-overflow in read_reloc. Affects radare2 versions >= 6124df443f347d1744a102a58dc3335e85063ea5, < 97f2d9cf5cdaee655e5a5527c78f42715b61ad51. Fixed in 97f2d9cf5cdaee655e5a5527c78f42715b61ad51. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
radare2 is an open-source framework for reverse engineering and analyzing binaries. It provides a set of command-line tools and libraries that allow users to disassemble, debug, and manipulate binary files. The vulnerability in question affects the read_reloc function in radare2, which is responsible for reading relocation records from dynamic sections of binary files.
Vulnerability Detail
The vulnerability identified in radare2 is a heap-buffer-overflow issue. It occurs when the read_reloc function attempts to write more data than the allocated buffer can hold. This can lead to memory corruption and potentially allow an attacker to execute arbitrary code or cause a denial-of-service condition. The issue has been assigned a severity rating of HIGH.
How To Fix
Minimum fixed version
97f2d9cf5cdaee655e5a5527c78f42715b61ad51
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The heap-buffer-overflow vulnerability in read_reloc function of radare2 can potentially allow an attacker to execute arbitrary code or cause a denial-of-service condition. It is recommended to update radare2 to the latest version and rebuild the software to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for radare2 →
FAQ
radare2 is an open-source framework for reverse engineering and analyzing binaries. It provides a set of command-line tools and libraries that allow users to disassemble, debug, and manipulate binary files.
The heap-buffer-overflow vulnerability in radare2 can potentially allow an attacker to execute arbitrary code or cause a denial-of-service condition.
To fix this vulnerability, it is recommended to update radare2 to the latest version. The issue has been addressed in commit 97f2d9cf5cdaee655e5a5527c78f42715b61ad51. Users can obtain the fix by pulling the latest changes from the official GitHub repository (https://github.com/radare/radare2) and rebuilding the software.
No specific workaround has been mentioned for this vulnerability.
More information about this vulnerability can be found in the OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21835
References
Related vulnerabilities
Recent vulnerabilities recorded for radare2.
