Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-3674

Опубликовано: 24 мар. 2023
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:rizin:rizin:*:*:*:*:*:*:*:*
Версия до 0.2.1 (включая)

EPSS

Процентиль: 29%
0.00104
Низкий

7.8 High

CVSS3

Дефекты

CWE-119
CWE-125
CWE-125

Связанные уязвимости

CVSS3: 7.8
github
больше 2 лет назад

A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function.

EPSS

Процентиль: 29%
0.00104
Низкий

7.8 High

CVSS3

Дефекты

CWE-119
CWE-125
CWE-125