An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4
[
{
"product": "libyara",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "libyara 4.0.4"
}
]
}
]
bugzilla.redhat.com/show_bug.cgi?id=1930175
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKNXSH5ERG6NELTXCYVJLUPJJJ2TNEBD/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXM224OLGI6KAOROLDPPGGCZ2OQVQ6HH/
www.openwall.com/lists/oss-security/2021/01/29/2
www.x41-dsec.de/lab/advisories/x41-2021-001-yara/