3 matches found
DEBIAN-CVE-2018-19974
In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack not the YARA virtual stack...
5.5CVSS6.8AI score0.01276EPSS
SaveExploits1References1
UBUNTU-CVE-2018-19974
In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack not the YARA virtual stack...
5.5CVSS6.8AI score0.01276EPSS
SaveExploits1References6
CVE-2018-19974
In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack not the YARA virtual stack...
5.5CVSS6.8AI score0.01276EPSS
SaveExploits1References5
20