CVE-2021-44078
published 2021-12-26CVE-2021-44078: An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first…
PriorityP343high8.1CVSS 3.1
AVLACHPRNUINSCCHIHAH
EPSS
0.53%
40.6th percentile
An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code in the target sandbox in order to exploit this vulnerability. The specific flaw exists within the virtual memory manager. The issue results from the faulty comparison of GVA and GPA while calling uc_mem_map_ptr to free part of a claimed memory block. An attacker can leverage this vulnerability to escape the sandbox and execute arbitrary code on the host machine.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| django-unicorn | unicorn | >= 0 < c733bbada356b0373fa8aa72c044574bb855fd24 | c733bbada356b0373fa8aa72c044574bb855fd24 |
| django-unicorn | unicorn | >= 0 < 2.0.0rc1 | 2.0.0rc1 |
| unicorn-engine | unicorn_engine | <= 1.0.3 | — |
| unicorn-engine | unicorn_engine | — | — |
CVSS provenance
nvdv3.18.1HIGHCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rmvm-v6m6-87vr: An issue was discovered in split_region in uc
ghsa_unreviewed·2021-12-27
CVE-2021-44078 [HIGH] CWE-697 GHSA-rmvm-v6m6-87vr: An issue was discovered in split_region in uc
An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code in the target sandbox in order to exploit this vulnerability. The specific flaw exists within the virtual memory manager. The issue results from the faulty comparison of GVA and GPA while calling uc_mem_map_ptr to free part of a claimed memory block. An attacker can leverage this vulnerability to escape the sandbox and execute arbitrary code on the host machine.
OSV
CVE-2021-44078: An issue was discovered in split_region in uc
osv·2021-12-26
CVE-2021-44078 CVE-2021-44078: An issue was discovered in split_region in uc
An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code in the target sandbox in order to exploit this vulnerability. The specific flaw exists within the virtual memory manager. The issue results from the faulty comparison of GVA and GPA while calling uc_mem_map_ptr to free part of a claimed memory block. An attacker can leverage this vulnerability to escape the sandbox and execute arbitrary code on the host machine.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://gist.github.com/jwang-a/cb4b6e9551457aa299066076b836a2cdhttps://github.com/jwang-a/CTF/blob/master/MyChallenges/Pwn/Unicorns_Aisle/UnicornsAisle.pdfhttps://github.com/unicorn-engine/unicorn/commit/c733bbada356b0373fa8aa72c044574bb855fd24https://github.com/unicorn-engine/unicorn/compare/2.0.0-rc4...2.0.0-rc5https://www.unicorn-engine.org/changelog/https://gist.github.com/jwang-a/cb4b6e9551457aa299066076b836a2cdhttps://github.com/jwang-a/CTF/blob/master/MyChallenges/Pwn/Unicorns_Aisle/UnicornsAisle.pdfhttps://github.com/unicorn-engine/unicorn/commit/c733bbada356b0373fa8aa72c044574bb855fd24https://github.com/unicorn-engine/unicorn/compare/2.0.0-rc4...2.0.0-rc5https://www.unicorn-engine.org/changelog/
2021-12-26
Published