Description
Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows attackers to exhaust disk space. Attackers can persuade users to install a crafted zip bomb extension archive that expands without size limits, causing later writes by Ghidra and other applications to fail.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NationalSecurityAgency | ghidra | < 12.2 | 12.2 |
References
- GitHub Security Advisory (GHSA-mcjr-7qqr-m3w8) vendor-advisory
- https://github.com/NationalSecurityAgency/ghidra/commit/2c2bc5be182d655c9df418ac35b9782f39b6a784 patch
- ghidra Ghidra_12.2_build Release Notes release-notes
- https://github.com/NationalSecurityAgency/ghidra product
- VulnCheck Advisory: Ghidra before 12.2 Denial of Service via Compressed Extension Archive third-party-advisory