8 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-26306
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak has been identified in the readSizedString function in util/read.c of libming v0.4.8, which allows attackers to cause a denial of service via a...
Linux Distros Unpatched Vulnerability : CVE-2017-8929
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The sizedstringcmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a...
PT-2025-7597 · Libming · Libming
Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory leak has been identified in the readSizedString function in util/read.c, which allows attackers to cause a denial of service via a crafted file. Recommendations: For libming version 0.4.8, consider...
GNU Binutils '_bfd_vms_save_sized_string' function stores out-of-bounds stack read vulnerability
GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...
YARA 'specialized_string_cmp' Denial of Service Vulnerability
YARA is a set of tools used to help software researchers identify and categorize malware samples. A denial-of-service vulnerability exists in the 'sizedstringcmp' parameter of the YARA libyara/sizedstr.c file, which can be exploited by a remote attacker to submit a special request and cause a...
DEBIAN-CVE-2017-8929
The sizedstringcmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule...
UBUNTU-CVE-2017-8929
The sizedstringcmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule...
PT-2017-18631
Name of the Vulnerable Software and Affected Versions YARA version 3.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a use-after-free and application crash, via a crafted rule. This is due to a problem in the sized string cmp function in...