9fans plan9port Heap-Based Buffer Overflow Vulnerability in X.509 Certificate Handling

A critical heap-based buffer overflow vulnerability has been identified in 9fans plan9port versions prior to 9da5b44. This issue occurs in the 'edump' function of the X.509 certificate handling library, specifically in 'src/libsec/port/x509.c'. The vulnerability can be exploited by sending specially crafted input, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a heap-based buffer overflow, which can lead to memory corruption and potentially allow for arbitrary code execution.

Reproduction

The vulnerability can be reproduced using a fuzzing harness that is part of the Google OSS-Fuzz project. This harness can be compiled and run with the plan9port libraries, using Clang as the compiler. The specific input that triggers the vulnerability is available as part of the fuzzing results.

Remediation

Users are advised to update to the latest version of plan9port, as a patch for this vulnerability has been released.