PT-2017-18835

Name of the Vulnerable Software and Affected Versions YARA version 3.5.0 Description The issue allows remote attackers to cause a denial of service, specifically stack consumption, via a crafted rule. This occurs due to mishandling in the yr re emit function within the regexp module...

QuickSand.io - Tool For Scanning Streams Within Office Documents Plus Xor DB Attack

QuickSand is a compact C framework to analyze suspected malware documents to 1 identify exploits in streams of different encodings, 2 locate and extract embedded executables. By having the ability to locate embedded obfuscated executables, QuickSand could detect documents that contain zero-day or...

YARA Denial of Service Vulnerability (CNVD-2017-08108)

YARA is a set of tools used to help software researchers identify and categorize malware samples. regex component is one of the regular expression components. A security vulnerability exists in the libyara/grammar.y file in YARA version 3.5.0. A remote attacker could exploit this vulnerability to...

YARA 'yy_get_next_buffer()' function denial of service vulnerability

YARA is a set of tools used to help software researchers identify and categorize malware samples. regex component is one of the regular expression components. A security vulnerability exists in the 'yygetnextbuffer' function in YARA version 3.5.0. A remote attacker can exploit this vulnerability ...

YARA 'yara_yyparse()' function denial of service vulnerability

YARA is a set of tools used to help software researchers identify and categorize malware samples. regex component is one of the regular expression components. A denial of service vulnerability exists in the YARA 'yarayyparse' function. A remote attacker can exploit this vulnerability to cause a...

YARA Denial of Service Vulnerability (CNVD-2017-08107)

YARA is a set of tools used to help software researchers identify and categorize malware samples. regex component is one of the regular expression components. A security vulnerability exists in the libyara/grammar.y file in YARA 3.5.0. A remote attacker could exploit this vulnerability to cause a...

YARA 'specialized_string_cmp' Denial of Service Vulnerability

YARA is a set of tools used to help software researchers identify and categorize malware samples. A denial-of-service vulnerability exists in the 'sizedstringcmp' parameter of the YARA libyara/sizedstr.c file, which can be exploited by a remote attacker to submit a special request and cause a...

Design/Logic Flaw

The sizedstringcmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule...

CVE-2017-8929

The sizedstringcmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule...

CVE-2017-8929

The sizedstringcmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule...

CVE-2017-8929

The sizedstringcmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule...

CVE-2017-8929

CVE-2017-8929 affects YARA 3.5.0. The vulnerability resides in the function in libyara/sizedstr.c: sized_string_cmp, which can be triggered by a crafted rule to cause a use-after-free and application crash, enabling a remote denial of service. The connected documents provide this description and ...

CVE-2017-8929

The sizedstringcmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule...

CVE-2017-8929

The sizedstringcmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule...

PT-2017-18631

Name of the Vulnerable Software and Affected Versions YARA version 3.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a use-after-free and application crash, via a crafted rule. This is due to a problem in the sized string cmp function in...

Fedora Update for yara FEDORA-2017-11ac1e31eb

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for yara FEDORA-2017-9941306740

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

YARA Denial of Service Vulnerability

YARA is a set of tools used to help software researchers identify and categorize malware samples. A denial of service vulnerability exists in the regex component in YARA 3.5.0. A remote attacker can exploit this vulnerability to cause a denial of service by mishandling a rule rule in the yrreexec...

Fedora 25 : yara (2017-11ac1e31eb)

Security fix CVE-2016-10210 CVE-2016-10211 CVE-2017-5923 CVE-2017-5924 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Fedora 24 : yara (2017-9941306740)

Security fix CVE-2016-10210 CVE-2016-10211 CVE-2017-5923 CVE-2017-5924 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...