NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files feature of Bit Patterns Explorer is used with a modified XML document. This occurs in Features/BytePatterns/src/main/java/ghidra/bitpatterns/info/FileBitPatternInfoReader.java. An attack could start with an XML document that was originally created by DumpFunctionPatternInfoScript but then directly modified by an attacker (for example, to make a java.lang.Runtime.exec call).
| package | channel | channel version | pkg version | status |
| ghidra-bin | ||||
| nixos-19.09 | ||||
| 2020-02-16 03:30:32 UTC (8731aa) | 9.0.4 | vulnerable | ||
| 2020-02-12 13:10:43 UTC (b9cb3b) | 9.0.4 | vulnerable | ||
| 2020-02-08 01:50:33 UTC (c49da6) | 9.0.4 | vulnerable | ||
| 2020-02-07 04:10:17 UTC (2de936) | 9.0.4 | vulnerable | ||
| 2020-02-06 14:00:24 UTC (463477) | 9.0.4 | vulnerable | ||
| 2020-02-03 10:30:42 UTC (ea553d) | 9.0.4 | vulnerable | ||
| 2020-02-02 16:35:27 UTC (8b76b1) | 9.0.4 | vulnerable | ||
| 2020-02-01 18:00:40 UTC (d3d2de) | 9.0.4 | vulnerable | ||
| 2020-01-30 18:20:24 UTC (1dadef) | 9.0.4 | vulnerable | ||
| 2020-01-29 17:30:32 UTC (6d9a4a) | 9.0.4 | vulnerable | ||
| 2020-01-29 15:45:44 UTC (845b91) | 9.0.4 | vulnerable | ||
| 2020-01-28 02:30:43 UTC (274e09) | 9.0.4 | vulnerable | ||
| 2020-01-27 10:20:40 UTC (299fbc) | 9.0.4 | vulnerable | ||
| 2020-01-25 19:10:37 UTC (57c35c) | 9.0.4 | vulnerable | ||
| 2020-01-24 05:20:34 UTC (e6391b) | 9.0.4 | vulnerable | ||
| 2020-01-23 06:05:40 UTC (a0fedb) | 9.0.4 | vulnerable | ||
| 2020-01-22 16:55:36 UTC (0fe895) | 9.0.4 | vulnerable | ||
| 2020-01-21 19:45:28 UTC (5d6da4) | 9.0.4 | vulnerable | ||
| 2020-01-19 20:00:16 UTC (d14cea) | 9.0.4 | vulnerable | ||
| 2020-01-19 09:45:32 UTC (5b9eee) | 9.0.4 | vulnerable | ||
| 2020-01-18 15:30:40 UTC (d12655) | 9.0.4 | vulnerable | ||
| 2020-01-18 04:55:18 UTC (63a356) | 9.0.4 | vulnerable | ||
| 2020-01-17 22:20:19 UTC (692a8c) | 9.0.4 | vulnerable | ||
| 2020-01-14 03:00:33 UTC (eb65d1) | 9.0.4 | vulnerable | ||
| 2020-01-13 12:15:41 UTC (5dc4d0) | 9.0.4 | vulnerable | ||
| 2020-01-12 10:05:28 UTC (f7d050) | 9.0.4 | vulnerable | ||
| 2020-01-11 11:35:40 UTC (9f453e) | 9.0.4 | vulnerable | ||
| 2020-01-10 04:30:25 UTC (caad1a) | 9.0.4 | vulnerable | ||
| 2020-01-09 09:50:31 UTC (b047b7) | 9.0.4 | vulnerable | ||
| 2020-01-09 04:40:19 UTC (db5273) | 9.0.4 | vulnerable | ||
| 2020-01-08 20:15:31 UTC (ac2184) | 9.0.4 | vulnerable | ||
| 2020-01-07 15:50:38 UTC (fd4ccd) | 9.0.4 | vulnerable | ||
| 2020-01-07 07:55:44 UTC (d245ff) | 9.0.4 | vulnerable | ||
| 2020-01-06 18:55:33 UTC (db3e83) | 9.0.4 | vulnerable | ||
| 2020-01-06 01:40:27 UTC (b92650) | 9.0.4 | vulnerable | ||
| 2020-01-05 08:35:31 UTC (a30706) | 9.0.4 | vulnerable | ||
| 2020-01-04 22:40:26 UTC (54c9e1) | 9.0.4 | vulnerable | ||
| 2020-01-04 10:10:27 UTC (2d9454) | 9.0.4 | vulnerable | ||
| 2020-01-03 03:40:48 UTC (ad1e1a) | 9.0.4 | vulnerable | ||
| 2019-12-30 03:40:30 UTC (eab4ee) | 9.0.4 | vulnerable | ||
| 2019-12-29 08:05:29 UTC (0d9055) | 9.0.4 | vulnerable | ||
| 2019-12-29 00:30:42 UTC (c5d556) | 9.0.4 | vulnerable | ||
| 2019-12-15 19:50:25 UTC (d85e43) | 9.0.4 | vulnerable | ||
| 2019-12-14 20:35:14 UTC (57b7b0) | 9.0.4 | vulnerable | ||
| 2019-12-14 12:15:34 UTC (7351aa) | 9.0.4 | vulnerable | ||
| 2019-12-11 01:15:24 UTC (45ea60) | 9.0.4 | vulnerable | ||
| 2019-12-09 15:40:12 UTC (3a1861) | 9.0.4 | vulnerable | ||
| 2019-12-09 12:37:41 UTC (808d3c) | 9.0.4 | vulnerable | ||
| 2019-11-19 17:55:35 UTC (e18436) | 9.0.4 | vulnerable | ||
| 2019-11-16 05:20:17 UTC (9104be) | 9.0.4 | vulnerable | ||
| 2019-11-15 16:45:24 UTC (851d5b) | 9.0.4 | vulnerable | ||
| 2019-11-15 13:45:26 UTC (259a67) | 9.0.4 | vulnerable | ||
| 2019-11-15 12:50:35 UTC (133d83) | 9.0.4 | vulnerable | ||
| 2019-11-13 13:55:19 UTC (cb2cda) | 9.0.4 | vulnerable | ||
| 2019-11-13 12:55:17 UTC (e6a37e) | 9.0.4 | vulnerable | ||
| 2019-11-12 12:50:19 UTC (ef8c34) | 9.0.4 | vulnerable | ||
| 2019-11-12 06:50:36 UTC (d493b9) | 9.0.4 | vulnerable | ||
| 2019-11-10 19:15:33 UTC (2d8969) | 9.0.4 | vulnerable | ||
| 2019-11-10 08:05:38 UTC (a22b01) | 9.0.4 | vulnerable | ||
| 2019-11-09 14:35:32 UTC (bae4d7) | 9.0.4 | vulnerable | ||
| 2019-11-09 02:50:37 UTC (107e2b) | 9.0.4 | vulnerable | ||
| 2019-11-08 22:50:25 UTC (d9a83d) | 9.0.4 | vulnerable | ||
| 2019-11-08 07:25:13 UTC (d62852) | 9.0.4 | vulnerable | ||
| 2019-11-07 13:45:22 UTC (821c7e) | 9.0.4 | vulnerable | ||
| 2019-11-01 09:50:45 UTC (c5aabb) | 9.0.4 | vulnerable | ||
| 2019-10-28 15:35:16 UTC (c75de8) | 9.0.4 | vulnerable | ||
| 2019-10-26 10:13:44 UTC (27a5dd) | 9.0.4 | vulnerable | ||
| 2019-10-22 23:35:42 UTC (f6dac8) | 9.0.4 | vulnerable | ||
| 2019-10-21 19:35:14 UTC (80b42e) | 9.0.4 | vulnerable | ||
| 2019-10-16 06:05:22 UTC (8bf142) | 9.0.4 | vulnerable | ||
| 2019-10-15 04:50:38 UTC (5000b1) | 9.0.4 | vulnerable | ||
| 2019-10-14 19:05:34 UTC (28d254) | 9.0.4 | vulnerable | ||
| 2019-10-13 07:54:16 UTC (795280) | 9.0.4 | vulnerable | ||
| 2019-10-13 01:22:00 UTC (222004) | 9.0.4 | vulnerable | ||
| 2019-10-11 01:30:19 UTC (dbad7c) | 9.0.4 | vulnerable | ||
| 2019-10-10 12:05:14 UTC (9bbad4) | 9.0.4 | vulnerable | ||
| 2019-10-10 06:55:20 UTC (8d0dc8) | 9.0.4 | vulnerable | ||
| 2019-10-09 16:35:37 UTC (88bbb3) | 9.0.4 | vulnerable | ||
| 2019-10-09 10:50:43 UTC (2a5bfd) | 9.0.4 | vulnerable | ||
| 2019-10-09 06:45:14 UTC (25757b) | 9.0.4 | vulnerable | ||
| 2019-10-08 23:20:40 UTC (724dbd) | 9.0.4 | vulnerable | ||
| 2019-10-04 06:35:23 UTC (3ba0d9) | 9.0.4 | vulnerable | ||
| 2019-10-03 20:00:43 UTC (8e1ce3) | 9.0.4 | vulnerable | ||
| 2019-10-03 07:35:19 UTC (77b5a1) | 9.0.4 | vulnerable | ||
| 2019-10-01 18:20:36 UTC (6bce1a) | 9.0.4 | vulnerable | ||
| 2019-09-30 04:25:35 UTC (7a3083) | 9.0.4 | vulnerable | ||
| 2019-09-29 16:25:32 UTC (e3930f) | 9.0.4 | vulnerable | ||
| 2019-09-29 07:05:42 UTC (548d0b) | 9.0.4 | vulnerable | ||
| 2019-09-26 18:30:43 UTC (b30f86) | 9.0.4 | vulnerable | ||
| 2019-09-26 15:30:21 UTC (78d056) | 9.0.4 | vulnerable | ||
| 2019-09-25 15:10:23 UTC (e34ac9) | 9.0.4 | vulnerable | ||
| 2019-09-25 14:40:22 UTC (9c0c76) | 9.0.4 | vulnerable | ||
| 2019-09-25 10:55:48 UTC (404d1c) | 9.0.4 | vulnerable | ||
| 2019-09-25 01:55:38 UTC (522048) | 9.0.4 | vulnerable | ||
| 2019-09-22 18:35:37 UTC (88f32c) | 9.0.4 | vulnerable | ||
| 2019-09-22 16:30:25 UTC (18670d) | 9.0.4 | vulnerable | ||
| 2019-09-22 13:35:35 UTC (6f65c2) | 9.0.4 | vulnerable | ||
| 2019-09-22 01:20:23 UTC (b66fb9) | 9.0.4 | vulnerable | ||
| 2019-09-21 12:25:36 UTC (47d653) | 9.0.4 | vulnerable | ||
| 2019-09-21 04:55:23 UTC (49f57e) | 9.0.4 | vulnerable | ||
| 2019-09-20 21:30:42 UTC (6825f0) | 9.0.4 | vulnerable | ||
| 2019-09-20 17:15:39 UTC (21be13) | 9.0.4 | vulnerable | ||
| 2019-09-20 16:40:26 UTC (499d72) | 9.0.4 | vulnerable | ||
| 2019-09-20 03:55:33 UTC (4fd551) | 9.0.4 | vulnerable | ||
| 2019-09-16 22:45:39 UTC (e6b068) | 9.0.4 | vulnerable | ||
| nixos-unstable | ||||
| 2019-12-09 12:37:43 UTC (3140fa) | 9.0.4 | vulnerable | ||
| 2019-11-19 17:55:36 UTC (e89b21) | 9.0.4 | vulnerable | ||
| 2019-11-16 10:50:41 UTC (c19665) | 9.0.4 | vulnerable | ||
| 2019-11-04 02:05:14 UTC (7827d3) | 9.0.4 | vulnerable | ||
| 2019-11-01 05:45:36 UTC (471869) | 9.0.4 | vulnerable | ||
| 2019-10-24 17:20:29 UTC (4cd2cb) | 9.0.4 | vulnerable | ||
| 2019-10-21 20:05:44 UTC (f35f08) | 9.0.4 | vulnerable | ||
| 2019-10-16 07:35:21 UTC (1c40ee) | 9.0.4 | vulnerable | ||
| 2019-10-14 09:05:43 UTC (94500c) | 9.0.4 | vulnerable | ||
| 2019-10-11 17:35:31 UTC (b94333) | 9.0.4 | vulnerable | ||
| 2019-10-11 08:50:35 UTC (8b46dc) | 9.0.4 | vulnerable | ||
| 2019-10-11 08:00:33 UTC (d8aae8) | 9.0.4 | vulnerable | ||
| 2019-10-08 18:30:37 UTC (07d4df) | 9.0.4 | vulnerable | ||
| 2019-09-27 01:00:32 UTC (2436c2) | 9.0.4 | vulnerable | ||
| 2019-09-26 20:30:35 UTC (82fe35) | 9.0.4 | vulnerable | ||
| 2019-09-25 12:40:33 UTC (f0fec2) | 9.0.4 | vulnerable | ||
| 2019-09-21 04:25:32 UTC (d484f2) | 9.0.4 | vulnerable | ||
| 2019-09-21 00:45:24 UTC (a7f002) | 9.0.4 | vulnerable | ||
| 2019-09-20 11:00:29 UTC (262b32) | 9.0.4 | vulnerable | ||
| 2019-09-09 15:15:20 UTC (e19054) | 9.0.4 | vulnerable | ||
| 2019-09-06 18:20:43 UTC (4e6069) | 9.0.4 | vulnerable | ||
| 2019-09-02 02:45:25 UTC (7d5375) | 9.0.4 | vulnerable | ||
| 2019-08-29 18:00:48 UTC (8d1510) | 9.0.4 | vulnerable | ||
| 2019-08-26 09:05:34 UTC (3f4144) | 9.0.4 | vulnerable | ||
| 2019-08-26 04:55:46 UTC (4ca0df) | 9.0.4 | vulnerable | ||
| 2019-08-25 19:30:27 UTC (af9f40) | 9.0.4 | vulnerable | ||
| 2019-08-24 15:10:36 UTC (765a71) | 9.0.4 | vulnerable | ||
| 2019-08-24 01:05:23 UTC (8f8422) | 9.0.4 | vulnerable | ||
| 2019-08-23 05:45:50 UTC (dfc6d5) | 9.0.4 | vulnerable | ||
| 2019-08-22 17:40:25 UTC (54c766) | 9.0.4 | vulnerable | ||
| 2019-08-22 13:40:17 UTC (8b56d2) | 9.0.4 | vulnerable | ||
| 2019-08-19 19:55:45 UTC (1412af) | 9.0.4 | vulnerable | ||
| 2019-08-13 10:35:42 UTC (8746c7) | 9.0.4 | vulnerable | ||
| 2019-08-13 00:30:27 UTC (984851) | 9.0.4 | vulnerable | ||
| 2019-08-11 10:20:42 UTC (4557b9) | 9.0.4 | vulnerable | ||
| 2019-08-10 22:25:37 UTC (387e69) | 9.0.4 | vulnerable | ||
| 2019-08-10 19:40:45 UTC (732c16) | 9.0.4 | vulnerable | ||
| 2019-08-10 11:15:23 UTC (62509f) | 9.0.4 | vulnerable | ||
| 2019-08-09 11:05:33 UTC (52f3c2) | 9.0.4 | vulnerable | ||
| 2019-08-08 22:20:43 UTC (63fa75) | 9.0.4 | vulnerable | ||
| 2019-08-08 12:50:36 UTC (8febac) | 9.0.4 | vulnerable | ||
| 2019-08-07 09:35:32 UTC (e275a6) | 9.0.4 | vulnerable | ||
| 2019-08-06 23:15:38 UTC (ac95de) | 9.0.4 | vulnerable | ||
| 2019-08-06 02:55:20 UTC (40e319) | 9.0.4 | vulnerable | ||
| 2019-08-05 14:30:20 UTC (57d650) | 9.0.4 | vulnerable | ||
| 2019-08-04 19:05:12 UTC (525eaf) | 9.0.4 | vulnerable | ||
| 2019-08-04 10:30:20 UTC (4e8a8a) | 9.0.4 | vulnerable | ||
| 2019-08-04 09:55:38 UTC (d834a4) | 9.0.2 | vulnerable | ||
| 2019-08-04 09:20:28 UTC (c0a858) | 9.0.2 | vulnerable | ||
| 2019-07-29 12:35:34 UTC (239fff) | 9.0.2 | vulnerable | ||
| 2019-07-29 04:15:32 UTC (bf39fc) | 9.0.2 | vulnerable | ||
| 2019-07-29 03:40:31 UTC (15564f) | 9.0.2 | vulnerable | ||
| 2019-07-25 15:40:19 UTC (b5f5c9) | 9.0.2 | vulnerable |