yaraast

yaraast Parse, analyze, and transform YARA rules with a Python AST toolkit Overview yaraast is a Python library for parsing and manipulating YARA-family rules using Abstract Syntax Trees AST. It supports classic YARA, YARA-L, and YARA-X workflows with automatic dialect detection and CLI tooling...

OSV-2024-1274 Segv on unknown address in yara_yyparse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515523 Crash type: Segv on unknown address Crash state: yarayyparse yrlexparserulesfile cliloadyara...

PT-2024-40625 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash state includes functions such as yara yyparse, yr lex...

clamav:clamav_dbload_YARA_fuzzer: Segv on unknown address in yara_yyparse

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=5077175391289344 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadYARAfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Segv on unknown address Crash Address:...

OSV-2023-650 Heap-use-after-free in yr_parser_lookup_loop_variable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61164 Crash type: Heap-use-after-free READ 1 Crash state: yrparserlookuploopvariable yarayyparse yrlexparserulesfile...

clamav:clamav_dbload_YARA_fuzzer: Heap-use-after-free in yr_parser_lookup_loop_variable

Detailed Report: https://oss-fuzz.com/testcase?key=5162821265260544 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadYARAfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6020000003b0 Crash State: yrparserlookuploopvariable...

clamav:clamav_dbload_YARA_fuzzer: Heap-use-after-free in yr_parser_lookup_loop_variable

Detailed Report: https://oss-fuzz.com/testcase?key=5745185207746560 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadYARAfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6050004b4c30 Crash State: yrparserlookuploopvariable...