Description
A vulnerability was determined in rxi fe up to ed4cda96bd582cbb08520964ba627efb40f3dd91. The impacted element is the function read_ of the file src/fe.c. This manipulation with the input 1 causes out-of-bounds read. The attack requires local access. The exploit has been publicly disclosed and may be utilized. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rxi | fe | ed4cda96bd582cbb08520964ba627efb40f3dd91 | — |
References
- VDB-350534 | rxi fe fe.c read_ out-of-bounds vdb-entry technical-description
- VDB-350534 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #769774 | rxi fe master-branch Out-of-Bounds Read third-party-advisory
- https://github.com/rxi/fe/issues/34 issue-tracking
- https://github.com/oneafter/0211/blob/main/fe/repro exploit
- https://github.com/rxi/fe/ product