Medium severity5.5OSV Advisory· Published Jul 31, 2019· Updated Jun 17, 2026
CVE-2019-5020
CVE-2019-5020
Description
An exploitable denial of service vulnerability exists in the object lookup functionality of Yara 3.8.1. A specially crafted binary file can cause a negative value to be read to satisfy an assert, resulting in Denial of Service. An attacker can create a malicious binary to trigger this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3v2.0.0, v2.1.0, v3.0.0, …+ 1 more
- (no CPE)range: v2.0.0, v2.1.0, v3.0.0, …
- cpe:2.3:a:virustotal:yara:3.8.1:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- talosintelligence.com/vulnerability_reports/TALOS-2019-0781nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.