idanshechter/cve-2017-13208-scannerPython script using r2pipe to detect CVE-2017-13208 in Android libnetutils.so by checking for missing dhcp_size validation via static binary analysis.
https://nvd.nist.gov/vuln/detail/CVE-2017-13208
This is a simple script capable of detecting the CVE-2017-13208 vulnerability in Android libnetutils.so files.
Using r2pipe, the script checks whether dhcp_size's value is checked, if it isn't - the file is vulnerable. All of the different libnetutils.so files that were researched compared a fixed number with dhcp_size's value. Therefore, the script checks for the existence of one of those fixed numbers - 1268, 1260 (0x4ec, 0x4f4), which indicates that the file isn't vulnerable.
./Script.py <file_path>
