UNKNOWN READ in r_str_ncpy in radare2
Summary
OSV-2023-974: UNKNOWN READ in r_str_ncpy. Affects radare2 across 2 version ranges.
< 9a310ec866cc802adf7245b76e357ea0f6145e59
>= 71fe0470e5b64572c4629bf2ed33bcf4b62d9322, < 59806217f8fdadd4de7d0edab81c40442d9aec75
Fixed in 59806217f8fdadd4de7d0edab81c40442d9aec75. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
radare2 is an open-source framework for reverse engineering and analyzing binaries. It provides a set of command-line tools and libraries for disassembling, debugging, and analyzing various file formats. The vulnerability in radare2 is related to an unknown read issue in the r_str_ncpy function.
Vulnerability Detail
The vulnerability in radare2 is categorized as an UNKNOWN READ issue. The specific crash state is in the r_str_ncpy function, which is called by Elf64_load_symbols_from and Elf64_load_symbols. The exact cause and impact of this vulnerability are not provided in the available information.
How To Fix
Minimum fixed version
59806217f8fdadd4de7d0edab81c40442d9aec75
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround is mentioned for this vulnerability.
Conclusion
The UNKNOWN READ vulnerability in radare2's r_str_ncpy function can be addressed by updating to the latest version of the package. It is recommended to update to radare2 version 3.0.1 or later to mitigate the risk associated with this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for radare2 →
FAQ
radare2 is an open-source framework for reverse engineering and analyzing binaries. It provides a set of command-line tools and libraries for disassembling, debugging, and analyzing various file formats.
An UNKNOWN READ vulnerability refers to a situation where an unknown memory read operation occurs, potentially leading to crashes or other security issues. In the case of radare2, the UNKNOWN READ issue is present in the r_str_ncpy function.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your version of radare2 is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time alerts for open-source vulnerabilities.
Yes, the vulnerability has been fixed in radare2 versions 3.0.1 and later. It is recommended to update to the latest version to address the UNKNOWN READ issue in r_str_ncpy.
You can find more information about this vulnerability in the OSS-Fuzz report linked in the provided details: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63030
References
Related vulnerabilities
Recent vulnerabilities recorded for radare2.
