Segv on unknown address in r_buf_free in radare2
Summary
OSV-2021-1786: Segv on unknown address in r_buf_free. Affects radare2 versions >= 3b04d3ef4093dafeff72e22589a3598ca0202ac9, < 500686304a355ef007875d841c848275487f7626. Fixed in 500686304a355ef007875d841c848275487f7626. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
radare2 is an open-source framework for reverse engineering and analyzing binary files. It provides a set of command-line tools and libraries that allow users to perform various tasks such as disassembling, debugging, and analyzing binary files. The vulnerability in radare2, identified as OSV-2021-1786, is related to a segmentation fault (Segv) that occurs on an unknown address during the execution of the r_buf_free function.
Vulnerability Detail
The vulnerability in radare2 can lead to a segmentation fault, causing the program to crash. The specific crash state observed is r_buf_free -> destroy -> r_bin_file_free. The exact cause of the segmentation fault is not mentioned in the provided information. However, it is important to note that segmentation faults can potentially be exploited by attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. The severity of this vulnerability is not specified.
How To Fix
Minimum fixed version
500686304a355ef007875d841c848275487f7626
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround is mentioned in the provided information. However, users can consider avoiding the execution of code that triggers the r_buf_free function to mitigate the risk of encountering the segmentation fault.
Conclusion
The vulnerability in radare2, identified as OSV-2021-1786, is related to a segmentation fault that occurs during the execution of the r_buf_free function. It is recommended to update to a fixed version of radare2 to mitigate the risk of encountering this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for radare2 →
FAQ
radare2 is an open-source framework for reverse engineering and analyzing binary files. It provides a set of command-line tools and libraries.
The vulnerability can lead to a segmentation fault, causing the program to crash. It may also have potential security implications if the segmentation fault can be exploited.
To fix this vulnerability, update to a version of radare2 that includes the fix mentioned in the provided information.
No specific workaround is mentioned, but users can consider avoiding the execution of code that triggers the vulnerable function.
For more information, you can refer to the OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43092
References
Related vulnerabilities
Recent vulnerabilities recorded for radare2.
