CVE-2022-36043 : Security Advisory and Response

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to a double free in bobj.c when using the qnx binary plugin. This vulnerability can allow an attacker to execute code on the user's machine by exploiting a malicious qnx binary. The issue has been patched in commit number a3d50c1ea185f3f642f2d8180715f82d98840784.

Understanding CVE-2022-36043

Rizin Double Free in bobj.c when using qnx binary plugin

What is CVE-2022-36043?

CVE-2022-36043 refers to a vulnerability in the Rizin reverse engineering framework where versions 0.4.0 and earlier are prone to a double free flaw in bobj.c while processing relocations from the qnx binary plugin. This flaw could lead to remote code execution on the affected system.

The Impact of CVE-2022-36043

The impact of CVE-2022-36043 is significant as it allows an attacker to execute arbitrary code on a victim's machine by tricking them into opening a specially crafted qnx binary. This could result in a complete compromise of the system.

Technical Details of CVE-2022-36043

Technical insights into the vulnerability

Vulnerability Description

The vulnerability arises from a double free flaw in bobj.c:rz_bin_reloc_storage_free() in Rizin versions 0.4.0 and below. By leveraging a malicious qnx binary, an attacker can trigger this flaw and potentially execute malicious code.

Affected Systems and Versions

Vendor: rizinorg
Product: rizin
Versions Affected: <= 0.4.0

Exploitation Mechanism

The exploitation involves enticing a user to open a compromised qnx binary file, triggering the double free flaw in the bobj.c component of Rizin, leading to potential code execution.

Mitigation and Prevention

Preventive measures and security recommendations

Immediate Steps to Take

Users are advised to update Rizin to a version beyond 0.4.0, where the patch for this vulnerability has been incorporated. Additionally, avoid opening untrusted qnx binaries to mitigate the risk of exploitation.

Long-Term Security Practices

Implementing secure coding practices, conducting regular security audits, and staying informed about the latest security advisories can help prevent similar vulnerabilities in the future.

Patching and Updates

Ensure regular software updates for Rizin to stay protected against known vulnerabilities and apply patches promptly to address security issues.