PeaZip OOB Write RCE Vulnerability (CVE-2024-102514) Advisory and Fix

Vulnerability Overview Vulnerability Name: Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive CVE ID: CVE-2024-102514 Severity: High Release Date: October 1, 2024 Description: An out-of-bounds write vulnerability (CWE-787) exists in the PEA archive extraction routine in PeaZip versions 11.2.0 and earlier. An attacker can craft a .pea archive to lure users into opening or extracting it, thereby executing arbitrary code with the privileges of the user running PeaZip. Impact Scope Affected Versions: All versions of PeaZip prior to 11.3.0 Vulnerability Types: - CWE-787: Out-of-bounds Write - CWE-1284: Improper Validation of Specified Quantity in Input - CWE-125: Out-of-bounds Read CVSS Score: 8.4 (High) Remediation Solution: Upgrade to PeaZip version 11.3.0 or later. The fix validates the size of the first compressed block before using it as the read length, copies the actual number of bytes read (numread) instead of the requested length, and stops the block read loop when the run offset exceeds the expected value. Patch Commit Hash: 90ddbaee0945a4d8ffa4d972d43711bbfb9576ba Additional Information Related CVEs: CVE-2024-11134, CVE-2024-11835, CVE-2024-11834 Discoverers: julichaar - finder, ck3p3r - finder, Dario Rivas Quero - analyst, Secur0 CNA - coordinator Discovery Source: External Official Record: CVE-2024-102514 Related Recommendations Missing authentication in Ecommerce Template product cache revalidation allows unauthenticated denial of service Missing ownership check on the shared memory object named by the kitty aspasp escape code Use after free in the kitty drag and drop protocol when a drag source item is aborted mid-transfer Footer Information Service Status: Service Status Copyright: © Secur0 2024. All rights reserved. Social Media Links: Facebook, Twitter, LinkedIn, GitHub --- Code Block

Goal Reached Thanks to every supporter — we hit 100%!

PeaZip OOB Write RCE Vulnerability (CVE-2024-102514) Advisory and Fix