CVE-2024-0124

What it actually does

Use-after-free condition in nvdisasm allows reading freed memory when processing a malformed ELF file, resulting in limited denial of service via crash.

Why it matters to the business

Disruption to development workflows or automated build pipelines that invoke the affected command-line tool, with low overall operational impact due to the limited scope.

How an attack unfolds

An attacker supplies a specially crafted malformed ELF binary to the nvdisasm tool, triggering the use-after-free condition that crashes the process.

How to fix it

Upgrade affected Rancher wrangler packages to one of the fixed versions: 0.7.4-security1, 0.8.5-security1, 1.0.1, or 0.8.11. Verify the update resolves the use-after-free in dependent command-line tooling.

How to confirm the fix worked

Confirm the installed package version matches a listed fixed release, then re-test nvdisasm against known malformed ELF samples to ensure no crash occurs.

Typical attack path

1. Create or obtain a malformed ELF file designed to trigger the vulnerability
2. Invoke nvdisasm on the crafted file via command line or automated process
3. Cause the tool to access freed memory and terminate unexpectedly

How to detect it

Review process execution logs and command-line arguments for nvdisasm invocations against suspicious or unexpected ELF files; inspect crash dumps or memory error reports for use-after-free patterns.

What your security team should do

• Apply the listed fixed versions immediately across all environments using the affected packages
• Scan build and CI pipelines for invocations of nvdisasm or similar ELF processing tools
• Monitor for any new EPSS increases or exploit maturity changes