Heap-based Buffer Overflow Affecting lief package, versions [,0.12.3)
Threat Intelligence
Exploit Maturity
Proof of concept
EPSS
0.12% (46th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-LIEF-3124994
- published 18 Nov 2022
- disclosed 18 Nov 2022
- credit JeasonTom
Introduced: 18 Nov 2022
CVE-2022-43171 Open this link in a new tabHow to fix?
Upgrade lief to version 0.12.3 or higher.
Overview
lief is a LIEF - Library to Instrument Executable Formats.
Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind which allows attackers to cause a Denial of Service (DoS) via a crafted MachO file.
References
CVSS Scores
version 3.1