Challenge Information - CROMU_00073

Commonly known as: Corinth

Rounds Enabled

18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32

Details

Original Versions

Known Vulnerabilities

  • CWE-121 - Stack-based Buffer Overflow
    • CWEs are listed as indicated by the challenge author.

Deployed patches

Deployed IDS rules

Author Information

"Bryce Kerley" bk@cromulence.com

DARPA performer group

Cromulence (CROMU)

Description

This binary accepts tuning parameters for a homemade PRNG, validates their randomness with a Monte Carlo method to calculate pi, and uses the PRNG to size a stack buffer for a relatively simple buffer overflow.

Feature List

  • Floating-point PRNG
  • Monte Carlo simulation calculating pi
  • Dynamically-sized stack buffer

Vulnerability

The service implements two tuning parameters for the PRNG. When they're tuned, they're used to calculate the value of pi, which is then compared with a known value for accuracy. As the difference shrinks, the limits for a buffer that is copied are raised, while the buffer size does not grow as rapidly, which allows the buffer to be overflowed onto the stack.

Generic class of vulnerability

Stack-based buffer overflow

CWE classification

CWE-121: Stack-based Buffer Overflow

Challenges

This CB begins with a requirement to tune parameters for a floating-point function with some state, including an initial value from the random page. A CRS will have to adapt its input for any given execution, including deciding on an expected buffer size range.

Subjective quantifications

Discovering: easy. Finding the causal connection between the PRNG and buffer size shouldn't be difficult. Proving: hard. Controlling the buffer size requires precise inputs to a complex algorithm using trigonometric functions. Fixing: easy.

POV Information

Round Source Destination Result POV Analysis Video
19 CSDS CodeJitsu Failed POV POV Watch
19 CSDS DeepRed Failed POV POV Watch
19 CSDS Disekt Failed POV POV Watch
19 CSDS ForAllSecure Failed POV POV Watch
19 CSDS Shellphish Failed POV POV Watch
19 CSDS TECHx Failed POV POV Watch
19 DeepRed CodeJitsu Failed POV POV Watch
19 DeepRed CSDS Failed POV POV Watch
19 DeepRed Disekt Failed POV POV Watch
19 DeepRed ForAllSecure Failed POV POV Watch
19 DeepRed Shellphish Failed POV POV Watch
19 DeepRed TECHx Failed POV POV Watch
19 ForAllSecure CodeJitsu Failed POV POV Watch
19 ForAllSecure CSDS Failed POV POV Watch
19 ForAllSecure DeepRed Failed POV POV Watch
19 ForAllSecure Disekt Failed POV POV Watch
19 ForAllSecure Shellphish Failed POV POV Watch
19 ForAllSecure TECHx Failed POV POV Watch
20 CodeJitsu Disekt Failed POV through defenses POV Watch
20 CSDS CodeJitsu Failed POV through defenses POV Watch
20 CSDS DeepRed Failed POV POV Watch
20 CSDS Disekt Failed POV through defenses POV Watch
20 CSDS ForAllSecure Failed POV POV Watch
20 CSDS Shellphish Failed POV POV Watch
20 CSDS TECHx Failed POV POV Watch
20 DeepRed CodeJitsu Failed POV through defenses POV Watch
20 DeepRed CSDS Failed POV POV Watch
20 DeepRed Disekt Failed POV through defenses POV Watch
20 DeepRed ForAllSecure Failed POV POV Watch
20 DeepRed Shellphish Failed POV POV Watch
20 DeepRed TECHx Failed POV POV Watch
20 ForAllSecure CodeJitsu Failed POV through defenses POV Watch
20 ForAllSecure CSDS Failed POV POV Watch
20 ForAllSecure DeepRed Failed POV POV Watch
20 ForAllSecure Disekt Failed POV through defenses POV Watch
20 ForAllSecure Shellphish Failed POV POV Watch
20 ForAllSecure TECHx Failed POV POV Watch
21 CodeJitsu Shellphish Failed POV through defenses POV Watch
21 CSDS CodeJitsu Failed POV through defenses POV Watch
21 CSDS DeepRed Failed POV POV Watch
21 CSDS Disekt Failed POV through defenses POV Watch
21 CSDS ForAllSecure Failed POV POV Watch
21 CSDS Shellphish Failed POV through defenses POV Watch
21 CSDS TECHx Failed POV POV Watch
21 DeepRed CodeJitsu Failed POV through defenses POV Watch
21 DeepRed CSDS Failed POV POV Watch
21 DeepRed Disekt Failed POV through defenses POV Watch
21 DeepRed ForAllSecure Failed POV POV Watch
21 DeepRed Shellphish Failed POV through defenses POV Watch
21 DeepRed TECHx Failed POV POV Watch
21 ForAllSecure CodeJitsu Failed POV through defenses POV Watch
21 ForAllSecure CSDS Failed POV POV Watch
21 ForAllSecure DeepRed Failed POV POV Watch
21 ForAllSecure Disekt Failed POV through defenses POV Watch
21 ForAllSecure Shellphish Failed POV through defenses POV Watch
21 ForAllSecure TECHx Failed POV POV Watch
22 CodeJitsu Shellphish Failed POV through defenses POV Watch
22 CSDS CodeJitsu Failed POV through defenses POV Watch
22 CSDS DeepRed Failed POV POV Watch
22 CSDS Disekt Failed POV through defenses POV Watch
22 CSDS ForAllSecure Failed POV POV Watch
22 CSDS Shellphish Failed POV through defenses POV Watch
22 CSDS TECHx Failed POV POV Watch
22 DeepRed CodeJitsu Failed POV through defenses POV Watch
22 DeepRed CSDS Failed POV POV Watch
22 DeepRed Disekt Failed POV through defenses POV Watch
22 DeepRed ForAllSecure Failed POV POV Watch
22 DeepRed Shellphish Failed POV through defenses POV Watch
22 DeepRed TECHx Failed POV POV Watch
22 ForAllSecure CodeJitsu Failed POV through defenses POV Watch
22 ForAllSecure CSDS Successful POV POV Analysis Watch
22 ForAllSecure DeepRed Successful POV POV Analysis Watch
22 ForAllSecure Disekt Failed POV through defenses POV Watch
22 ForAllSecure Shellphish Failed POV through defenses POV Watch
22 ForAllSecure TECHx Successful POV POV Analysis Watch
23 CodeJitsu CSDS Successful POV POV Analysis Watch
23 CodeJitsu DeepRed Successful POV POV Analysis Watch
23 CodeJitsu ForAllSecure Failed POV through defenses POV Watch
23 CodeJitsu Shellphish Failed POV through defenses POV Watch
23 CodeJitsu TECHx Successful POV POV Analysis Watch
23 CSDS CodeJitsu Failed POV through defenses POV Watch
23 CSDS DeepRed Failed POV POV Watch
23 CSDS Disekt Failed POV through defenses POV Watch
23 CSDS ForAllSecure Failed POV through defenses POV Watch
23 CSDS Shellphish Failed POV through defenses POV Watch
23 CSDS TECHx Failed POV POV Watch
23 DeepRed CodeJitsu Failed POV through defenses POV Watch
23 DeepRed CSDS Failed POV POV Watch
23 DeepRed Disekt Failed POV through defenses POV Watch
23 DeepRed ForAllSecure Failed POV through defenses POV Watch
23 DeepRed Shellphish Failed POV through defenses POV Watch
23 DeepRed TECHx Failed POV POV Watch
23 ForAllSecure CodeJitsu Failed POV through defenses POV Watch
23 ForAllSecure CSDS Successful POV POV Analysis Watch
23 ForAllSecure DeepRed Successful POV POV Analysis Watch
23 ForAllSecure Disekt Failed POV through defenses POV Watch
23 ForAllSecure Shellphish Failed POV through defenses POV Watch
23 ForAllSecure TECHx Successful POV POV Analysis Watch
24 CodeJitsu CSDS Failed POV through defenses POV Watch
24 CodeJitsu Disekt Failed POV through defenses POV Watch
24 CodeJitsu ForAllSecure Failed POV through defenses POV Watch
24 CodeJitsu Shellphish Failed POV through defenses POV Watch
24 CSDS CodeJitsu Failed POV through defenses POV Watch
24 CSDS Disekt Failed POV through defenses POV Watch
24 CSDS ForAllSecure Failed POV through defenses POV Watch
24 CSDS Shellphish Failed POV through defenses POV Watch
24 DeepRed CodeJitsu Failed POV through defenses POV Watch
24 DeepRed CSDS Failed POV through defenses POV Watch
24 DeepRed Disekt Failed POV through defenses POV Watch
24 DeepRed ForAllSecure Failed POV through defenses POV Watch
24 DeepRed Shellphish Failed POV through defenses POV Watch
24 ForAllSecure CodeJitsu Failed POV through defenses POV Watch
24 ForAllSecure CSDS Failed POV through defenses POV Watch
24 ForAllSecure Disekt Failed POV through defenses POV Watch
24 ForAllSecure Shellphish Failed POV through defenses POV Watch
25 CodeJitsu CSDS Failed POV through defenses POV Watch
25 CodeJitsu DeepRed Failed POV through defenses POV Watch
25 CodeJitsu Disekt Failed POV through defenses POV Watch
25 CodeJitsu ForAllSecure Failed POV through defenses POV Watch
25 CodeJitsu Shellphish Failed POV through defenses POV Watch
25 CodeJitsu TECHx Failed POV through defenses POV Watch
25 CSDS CodeJitsu Failed POV through defenses POV Watch
25 CSDS DeepRed Failed POV through defenses POV Watch
25 CSDS Disekt Failed POV through defenses POV Watch
25 CSDS ForAllSecure Failed POV through defenses POV Watch
25 CSDS Shellphish Failed POV through defenses POV Watch
25 CSDS TECHx Failed POV through defenses POV Watch
25 DeepRed CodeJitsu Failed POV through defenses POV Watch
25 DeepRed CSDS Failed POV through defenses POV Watch
25 DeepRed Disekt Failed POV through defenses POV Watch
25 DeepRed ForAllSecure Failed POV through defenses POV Watch
25 DeepRed Shellphish Failed POV through defenses POV Watch
25 DeepRed TECHx Failed POV through defenses POV Watch
25 ForAllSecure CodeJitsu Failed POV through defenses POV Watch
25 ForAllSecure CSDS Failed POV through defenses POV Watch
25 ForAllSecure DeepRed Failed POV through defenses POV Watch
25 ForAllSecure Disekt Failed POV through defenses POV Watch
25 ForAllSecure Shellphish Failed POV through defenses POV Watch
25 ForAllSecure TECHx Failed POV through defenses POV Watch
26 CodeJitsu CSDS Failed POV through defenses POV Watch
26 CodeJitsu Disekt Failed POV through defenses POV Watch
26 CodeJitsu ForAllSecure Failed POV through defenses POV Watch
26 CodeJitsu Shellphish Failed POV through defenses POV Watch
26 CodeJitsu TECHx Failed POV through defenses POV Watch
26 CSDS CodeJitsu Failed POV through defenses POV Watch
26 CSDS DeepRed Failed POV through defenses POV Watch
26 CSDS Disekt Failed POV through defenses POV Watch
26 CSDS ForAllSecure Failed POV through defenses POV Watch
26 CSDS Shellphish Failed POV through defenses POV Watch
26 CSDS TECHx Failed POV through defenses POV Watch
26 DeepRed CodeJitsu Failed POV through defenses POV Watch
26 DeepRed CSDS Failed POV through defenses POV Watch
26 DeepRed Disekt Failed POV through defenses POV Watch
26 DeepRed ForAllSecure Failed POV through defenses POV Watch
26 DeepRed Shellphish Failed POV through defenses POV Watch
26 DeepRed TECHx Failed POV through defenses POV Watch
26 ForAllSecure CodeJitsu Failed POV through defenses POV Watch
26 ForAllSecure CSDS Failed POV through defenses POV Watch
26 ForAllSecure Disekt Failed POV through defenses POV Watch
26 ForAllSecure Shellphish Failed POV through defenses POV Watch
26 ForAllSecure TECHx Failed POV through defenses POV Watch
27 CodeJitsu CSDS Failed POV through defenses POV Watch
27 CodeJitsu Disekt Failed POV through defenses POV Watch
27 CodeJitsu ForAllSecure Failed POV through defenses POV Watch
27 CodeJitsu Shellphish Failed POV through defenses POV Watch
27 CodeJitsu TECHx Failed POV through defenses POV Watch
27 CSDS CodeJitsu Failed POV through defenses POV Watch
27 CSDS Disekt Failed POV through defenses POV Watch
27 CSDS ForAllSecure Failed POV through defenses POV Watch
27 CSDS Shellphish Failed POV through defenses POV Watch
27 CSDS TECHx Failed POV through defenses POV Watch
27 DeepRed CodeJitsu Failed POV through defenses POV Watch
27 DeepRed CSDS Failed POV through defenses POV Watch
27 DeepRed Disekt Failed POV through defenses POV Watch
27 DeepRed ForAllSecure Failed POV through defenses POV Watch
27 DeepRed Shellphish Failed POV through defenses POV Watch
27 DeepRed TECHx Failed POV through defenses POV Watch
27 ForAllSecure CodeJitsu Failed POV through defenses POV Watch
27 ForAllSecure CSDS Failed POV through defenses POV Watch
27 ForAllSecure Disekt Failed POV through defenses POV Watch
27 ForAllSecure Shellphish Failed POV through defenses POV Watch
27 ForAllSecure TECHx Failed POV through defenses POV Watch
28 CodeJitsu CSDS Failed POV through defenses POV Watch
28 CodeJitsu DeepRed Successful POV POV Analysis Watch
28 CodeJitsu Disekt Failed POV through defenses POV Watch
28 CodeJitsu ForAllSecure Failed POV through defenses POV Watch
28 CodeJitsu Shellphish Failed POV through defenses POV Watch
28 CodeJitsu TECHx Failed POV through defenses POV Watch
28 CSDS CodeJitsu Failed POV through defenses POV Watch
28 CSDS DeepRed Failed POV POV Watch
28 CSDS Disekt Failed POV through defenses POV Watch
28 CSDS ForAllSecure Failed POV through defenses POV Watch
28 CSDS Shellphish Failed POV through defenses POV Watch
28 CSDS TECHx Failed POV through defenses POV Watch
28 DeepRed CodeJitsu Failed POV through defenses POV Watch
28 DeepRed CSDS Failed POV through defenses POV Watch
28 DeepRed Disekt Failed POV through defenses POV Watch
28 DeepRed ForAllSecure Failed POV through defenses POV Watch
28 DeepRed Shellphish Failed POV through defenses POV Watch
28 DeepRed TECHx Failed POV through defenses POV Watch
28 Disekt CSDS Failed POV through defenses POV Watch
28 Disekt ForAllSecure Failed POV through defenses POV Watch
28 Disekt Shellphish Failed POV through defenses POV Watch
28 ForAllSecure CodeJitsu Successful POV through defenses POV Analysis Watch
28 ForAllSecure CSDS Failed POV through defenses POV Watch
28 ForAllSecure Disekt Failed POV through defenses POV Watch
28 ForAllSecure Shellphish Failed POV through defenses POV Watch
28 ForAllSecure TECHx Failed POV through defenses POV Watch
29 CodeJitsu CSDS Failed POV through defenses POV Watch
29 CodeJitsu DeepRed Successful POV POV Analysis Watch
29 CodeJitsu Disekt Failed POV through defenses POV Watch
29 CodeJitsu ForAllSecure Failed POV through defenses POV Watch
29 CodeJitsu Shellphish Failed POV through defenses POV Watch
29 CodeJitsu TECHx Failed POV through defenses POV Watch
29 CSDS CodeJitsu Failed POV through defenses POV Watch
29 CSDS DeepRed Failed POV POV Watch
29 CSDS Disekt Failed POV through defenses POV Watch
29 CSDS ForAllSecure Failed POV through defenses POV Watch
29 CSDS Shellphish Failed POV through defenses POV Watch
29 CSDS TECHx Failed POV through defenses POV Watch
29 DeepRed CodeJitsu Failed POV through defenses POV Watch
29 DeepRed CSDS Failed POV through defenses POV Watch
29 DeepRed Disekt Failed POV through defenses POV Watch
29 DeepRed ForAllSecure Failed POV through defenses POV Watch
29 DeepRed Shellphish Failed POV through defenses POV Watch
29 DeepRed TECHx Failed POV through defenses POV Watch
29 Disekt CSDS Failed POV through defenses POV Watch
29 Disekt DeepRed Successful POV POV Analysis Watch
29 Disekt ForAllSecure Failed POV through defenses POV Watch
29 Disekt Shellphish Failed POV through defenses POV Watch
29 Disekt TECHx Failed POV through defenses POV Watch
29 ForAllSecure CodeJitsu Failed POV through defenses POV Watch
29 ForAllSecure CSDS Failed POV through defenses POV Watch
29 ForAllSecure DeepRed Successful POV POV Analysis Watch
29 ForAllSecure Disekt Failed POV through defenses POV Watch
29 ForAllSecure Shellphish Failed POV through defenses POV Watch
29 ForAllSecure TECHx Failed POV through defenses POV Watch
30 CodeJitsu CSDS Failed POV through defenses POV Watch
30 CodeJitsu Disekt Failed POV through defenses POV Watch
30 CodeJitsu ForAllSecure Failed POV through defenses POV Watch
30 CodeJitsu Shellphish Failed POV through defenses POV Watch
30 CodeJitsu TECHx Failed POV through defenses POV Watch
30 CSDS CodeJitsu Failed POV through defenses POV Watch
30 CSDS Disekt Failed POV through defenses POV Watch
30 CSDS ForAllSecure Failed POV through defenses POV Watch
30 CSDS Shellphish Failed POV through defenses POV Watch
30 CSDS TECHx Failed POV through defenses POV Watch
30 DeepRed CodeJitsu Failed POV through defenses POV Watch
30 DeepRed CSDS Failed POV through defenses POV Watch
30 DeepRed Disekt Failed POV through defenses POV Watch
30 DeepRed ForAllSecure Failed POV through defenses POV Watch
30 DeepRed Shellphish Failed POV through defenses POV Watch
30 DeepRed TECHx Failed POV through defenses POV Watch
30 Disekt CSDS Failed POV through defenses POV Watch
30 Disekt ForAllSecure Failed POV through defenses POV Watch
30 Disekt Shellphish Failed POV through defenses POV Watch
30 Disekt TECHx Failed POV through defenses POV Watch
30 ForAllSecure CodeJitsu Failed POV through defenses POV Watch
30 ForAllSecure CSDS Failed POV through defenses POV Watch
30 ForAllSecure Disekt Failed POV through defenses POV Watch
30 ForAllSecure Shellphish Failed POV through defenses POV Watch
30 ForAllSecure TECHx Failed POV through defenses POV Watch
31 CodeJitsu CSDS Failed POV through defenses POV Watch
31 CodeJitsu DeepRed Failed POV through defenses POV Watch
31 CodeJitsu Disekt Failed POV through defenses POV Watch
31 CodeJitsu ForAllSecure Failed POV through defenses POV Watch
31 CodeJitsu Shellphish Failed POV through defenses POV Watch
31 CodeJitsu TECHx Failed POV through defenses POV Watch
31 CSDS CodeJitsu Failed POV through defenses POV Watch
31 CSDS DeepRed Failed POV through defenses POV Watch
31 CSDS Disekt Failed POV through defenses POV Watch
31 CSDS ForAllSecure Failed POV through defenses POV Watch
31 CSDS Shellphish Failed POV through defenses POV Watch
31 CSDS TECHx Failed POV through defenses POV Watch
31 DeepRed CodeJitsu Failed POV through defenses POV Watch
31 DeepRed CSDS Failed POV through defenses POV Watch
31 DeepRed Disekt Failed POV through defenses POV Watch
31 DeepRed ForAllSecure Failed POV through defenses POV Watch
31 DeepRed Shellphish Failed POV through defenses POV Watch
31 DeepRed TECHx Failed POV through defenses POV Watch
31 Disekt CSDS Failed POV through defenses POV Watch
31 Disekt DeepRed Failed POV through defenses POV Watch
31 Disekt ForAllSecure Failed POV through defenses POV Watch
31 Disekt Shellphish Failed POV through defenses POV Watch
31 Disekt TECHx Failed POV through defenses POV Watch
31 ForAllSecure CodeJitsu Failed POV through defenses POV Watch
31 ForAllSecure CSDS Failed POV through defenses POV Watch
31 ForAllSecure Disekt Failed POV through defenses POV Watch
31 ForAllSecure Shellphish Failed POV through defenses POV Watch
31 ForAllSecure TECHx Failed POV through defenses POV Watch
32 CodeJitsu CSDS Failed POV through defenses POV Watch
32 CodeJitsu DeepRed Failed POV through defenses POV Watch
32 CodeJitsu Disekt Failed POV through defenses POV Watch
32 CodeJitsu ForAllSecure Failed POV through defenses POV Watch
32 CodeJitsu Shellphish Failed POV through defenses POV Watch
32 CodeJitsu TECHx Failed POV through defenses POV Watch
32 CSDS CodeJitsu Failed POV through defenses POV Watch
32 CSDS DeepRed Failed POV through defenses POV Watch
32 CSDS Disekt Failed POV through defenses POV Watch
32 CSDS ForAllSecure Failed POV through defenses POV Watch
32 CSDS Shellphish Failed POV through defenses POV Watch
32 CSDS TECHx Failed POV through defenses POV Watch
32 DeepRed CodeJitsu Failed POV through defenses POV Watch
32 DeepRed CSDS Failed POV through defenses POV Watch
32 DeepRed Disekt Failed POV through defenses POV Watch
32 DeepRed ForAllSecure Failed POV through defenses POV Watch
32 DeepRed Shellphish Failed POV through defenses POV Watch
32 DeepRed TECHx Failed POV through defenses POV Watch
32 Disekt CSDS Failed POV through defenses POV Watch
32 Disekt DeepRed Failed POV through defenses POV Watch
32 Disekt ForAllSecure Failed POV through defenses POV Watch
32 Disekt Shellphish Failed POV through defenses POV Watch
32 Disekt TECHx Failed POV through defenses POV Watch
32 ForAllSecure CodeJitsu Failed POV through defenses POV Watch
32 ForAllSecure CSDS Failed POV through defenses POV Watch
32 ForAllSecure Disekt Failed POV through defenses POV Watch
32 ForAllSecure Shellphish Failed POV through defenses POV Watch
32 ForAllSecure TECHx Failed POV through defenses POV Watch

Curated by Lunge Technology, LLC. Questions or comments? Send us email