CVE-2021-3402

🗓️ 14 May 2021 20:05:25Reported by redhatType

An integer overflow and buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to cause denial of service or information disclosure via a malicious Mach-O file

Reporter	Title	Published	Views	Family All 37
CNNVD	YARA 输入验证错误漏洞	5 May 202100:00	–	cnnvd
Cvelist	CVE-2021-3402	14 May 202120:05	–	cvelist
Debian CVE	CVE-2021-3402	14 May 202120:05	–	debiancve
EUVD	EUVD-2021-26730	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 33 Update: python-yara-4.1.0-1.fc33	6 May 202100:54	–	fedora
Fedora	[SECURITY] Fedora 34 Update: python-yara-4.1.0-1.fc34	5 May 202101:23	–	fedora
Fedora	[SECURITY] Fedora 33 Update: yara-4.1.0-1.fc33	6 May 202100:54	–	fedora
Fedora	[SECURITY] Fedora 34 Update: yara-4.1.0-1.fc34	5 May 202101:23	–	fedora
NVD	CVE-2021-3402	14 May 202121:15	–	nvd
OpenVAS	Ubuntu: Security Advisory (USN-8080-1)	10 Mar 202600:00	–	openvas

NVD

Vulners

Node

virustotal yaraRange<4.0.4

Node

fedoraproject fedoraMatch33

fedoraproject fedoraMatch34

[
  {
    "product": "libyara",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "libyara 4.0.4"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXM224OLGI6KAOROLDPPGGCZ2OQVQ6HH/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKNXSH5ERG6NELTXCYVJLUPJJJ2TNEBD/
x41-dsec	www.x41-dsec.de/lab/advisories/x41-2021-001-yara/
openwall	www.openwall.com/lists/oss-security/2021/01/29/2

21 Nov 2024 06:21Current

8.8High risk

Vulners AI Score8.8

CVSS 26.4

CVSS 3.19.1

EPSS0.00468

CWE-190