yls

YLS 用于 YARA 语言的 语言服务器。 🚀 功能： 所有可用模块的代码补全（包括函数参数） 用于悬停提示和代码补全的函数文档 约定式代码格式化 签名帮助 代码检查 跳转到定义和引用 光标下的符号高亮 使用 yari 进行调试 ... 更多信息，请参阅： 博客文章 Wiki 🐍 最低支持的 Python 版本为 3.8。 安装 请按照 wiki 上的说明设置您的环境。 如何开发 以开发模式安装 YLS 及所有必要的依赖项。 poetry install 测试 您可以使用以下命令运行测试： poetry run pytest 许可证 版权所有 c 2022 Avast...

yari

YARI - YARA 交互式调试器 用 Rust 编写的 YARA 语言的交互式调试器。调试器直接调用 libyara，避免模拟，以获得最准确的结果。 🚀 功能特性： 从模块调用函数 获取模块常量的值 计算复杂表达式 检查字符串的匹配情况 支持外部变量 与 YARA Language Server 集成 更多信息请参阅： 博客文章 Wiki 安装 要配置您的环境，请遵循 YLS wiki 中的说明。 交互式 shell 该二进制文件接受与原始 yara 二进制文件相同的参数。 λ yari /bin/sh elf.numberofsections Integer26 许可证 版权所有 ...

Linux Distros Unpatched Vulnerability : CVE-2018-12034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yrexecutecode in libyara/exec.c...

Linux Distros Unpatched Vulnerability : CVE-2017-9304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service stack consumption via a crafted rule that is mishandled in...

Linux Distros Unpatched Vulnerability : CVE-2017-5923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service heap-based out-of- bounds read and application crash via a crafted rule tha...

OPENSUSE-SU-2024:11530-1 libyara-devel-4.1.1-1.2 on GA media

These are all security issues fixed in the libyara-devel-4.1.1-1.2 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2016-10210

libyara/lexer.l in YARA 3.5.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted rule that is mishandled in the yygetnextbuffer function...

SUSE CVE-2017-8929

The sizedstringcmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule...

SUSE CVE-2018-12034

In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yrexecutecode in libyara/exec.c...

SUSE CVE-2018-12035

In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds write vulnerability in yrexecutecode in libyara/exec.c...

SUSE CVE-2018-19974

In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack not the YARA virtual stack...

SUSE CVE-2018-19976

In YARA 3.8.1, bytecode in a specially crafted compiled rule is exposed to information about its environment, in libyara/exec.c. This is a consequence of the design of the YARA virtual machine...

PT-2022-12351

Name of the Vulnerable Software and Affected Versions VirusTotal YARA affected versions not specified Description A Buffer Overflow issue exists in VirusTotal YARA, specifically via yr set configuration in yara/libyara/libyara.c, which could cause a Denial of Service. Recommendations At the momen...

CVE-2021-3402

An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4...

DEBIAN-CVE-2021-3402

An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4...

Integer overflow

An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4...

CVE-2021-3402

An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4...

CVE-2021-3402

An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4...

CVE-2021-3402

CVE-2021-3402 affects YARA v4.0.3 and earlier due to an integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c. This can allow a malicious Mach-O file to cause a denial of service or information disclosure . The vulnerability is fixed in libyara 4.0.4 ; upgrading to t...

CVE-2021-3402: Integer Overflow or Wraparound

An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4...