Abstract:Code reuse in software development frequently facilitates the spread of vulnerabilities, making the scope of affected software in CVE reports imprecise. Traditional methods primarily focus on identifying reused vulnerability code within target software, yet they cannot verify if these vulnerabilities can be triggered in new software contexts. This limitation often results in false positives. In this paper, we introduce TransferFuzz, a novel vulnerability verification framework, to verify whether vulnerabilities propagated through code reuse can be triggered in new software. Innovatively, we collected runtime information during the execution or fuzzing of the basic binary (the vulnerable binary detailed in CVE reports). This process allowed us to extract historical traces, which proved instrumental in guiding the fuzzing process for the target binary (the new binary that reused the vulnerable function). TransferFuzz introduces a unique Key Bytes Guided Mutation strategy and a Nested Simulated Annealing algorithm, which transfers these historical traces to implement trace-guided fuzzing on the target binary, facilitating the accurate and efficient verification of the propagated vulnerability. Our evaluation, conducted on widely recognized datasets, shows that TransferFuzz can quickly validate vulnerabilities previously unverifiable with existing techniques. Its verification speed is 2.5 to 26.2 times faster than existing methods. Moreover, TransferFuzz has proven its effectiveness by expanding the impacted software scope for 15 vulnerabilities listed in CVE reports, increasing the number of affected binaries from 15 to 53. The datasets and source code used in this article are available at <a class="link-external link-https" href="https://github.com/Siyuan-Li201/TransferFuzz" rel="external noopener nofollow">this https URL</a>.

Research on Software Vulnerability Testing Based on Function-Call

Function-Level Vulnerability Detection Through Fusing Multi-Modal Knowledge

Test Method on Code Injection Vulnerabilities of Web Application

An Intrusion Detection System Based On System Call

Exploiting Library Vulnerability via Migration Based Automating Test Generation

Vulnerability analysis dased on a fuzzy input testing

Software vulnerable functions discovery based on code composite feature

Towards Vulnerability Discovery Using Staged Program Analysis

A cross-platform multifunctional testbed for vulnerability attack

TransferFuzz: Fuzzing with Historical Trace for Verifying Propagated Vulnerability Code

ClearBug An improved automatic tool for bug analysis

SQVDT: A Scalable Quantitative Vulnerability Detection Technique for Source Code Security Assessment.

A Software Vulnerability Analysis Environment Based on Virtualization Technology

FVA: Assessing Function-Level Vulnerability by Integrating Flow-Sensitive Structure and Code Statement Semantic.

An Open Source Software Defect Detection Technique Based on Homology Detection and Pre-identification Vulnerabilitys

Smart Contract Vulnerability Detection based on Static Analysis and Multi-Objective Search

Survey on Software Vulnerability Analysis Method Based on Machine Learning.

Method for Automated Detection of Suspicious Vulnerability Related to Numerical Stability

Research on Integer-Based Vulnerabilities：Security Model, Detecting Methods and Real- World Cases

Vulnerability Analysis Framework for Binaries Based on Model Checking

Automated software vulnerability detection with machine learning