Denial of Service Vulnerability in LIEF MachO Handling by LIEF Project
CVE-2022-40923

6.5MEDIUM

Key Information:

Vendor

Lief-project

Status
Lief
Vendor
CVE Published:
30 September 2022

What is CVE-2022-40923?

A vulnerability located in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 enables attackers to exploit crafted MachO files. This exploitation can lead to a denial of service condition by causing a segmentation fault, potentially disrupting service availability for users. It is essential for developers and users of LIEF to take precautions against this vulnerability, as it poses risks in environments where MachO files are processed.

References

https://github.com/lief-project/LIEF/issues/784
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2022-40923 : Denial of Service Vulnerability in LIEF MachO Handling by LIEF Project