4 matches found
SUSE CVE-2017-8294
libyara/re.c in the regex component in YARA 3.5.0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted rule that is mishandled in the yrreexec function...
YARA Denial of Service Vulnerability
YARA is a set of tools used to help software researchers identify and categorize malware samples. A denial of service vulnerability exists in the regex component in YARA 3.5.0. A remote attacker can exploit this vulnerability to cause a denial of service by mishandling a rule rule in the yrreexec...
DEBIAN-CVE-2017-8294
libyara/re.c in the regex component in YARA 3.5.0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted rule that is mishandled in the yrreexec function...
PT-2017-18264
Name of the Vulnerable Software and Affected Versions YARA version 3.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash. This occurs when a crafted rule is mishandled in the yr re exec function. Recommendations...