YARA

CVEs (5)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-5020	YARA YARA	Med	0.36	5.5	0.01	Jul 31, 2019	An exploitable denial of service vulnerability exists in the object lookup functionality of Yara 3.8.1. A specially crafted binary file can cause a negative value to be read to satisfy an assert, resulting in Denial of Service. An attacker can create a malicious binary to…
CVE-2018-19976	YARA YARA	Med	0.36	5.5	0.01	Dec 17, 2018	In YARA 3.8.1, bytecode in a specially crafted compiled rule is exposed to information about its environment, in libyara/exec.c. This is a consequence of the design of the YARA virtual machine.
CVE-2018-19975	YARA YARA	Med	0.36	5.5	0.01	Dec 17, 2018	In YARA 3.8.1, bytecode in a specially crafted compiled rule can read data from any arbitrary address in memory, in libyara/exec.c. Specifically, OP_COUNT can read a DWORD.
CVE-2018-19974	YARA YARA	Med	0.36	5.5	0.01	Dec 17, 2018	In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack (not the YARA virtual stack).
CVE-2017-11328	YARA YARA	Med	0.36	5.5	0.01	Jul 17, 2017	Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file.

CVE-2019-5020MedJul 31, 2019
YARA
YARA
risk 0.36cvss 5.5epss 0.01
An exploitable denial of service vulnerability exists in the object lookup functionality of Yara 3.8.1. A specially crafted binary file can cause a negative value to be read to satisfy an assert, resulting in Denial of Service. An attacker can create a malicious binary to…
CVE-2018-19976MedDec 17, 2018
YARA
YARA
risk 0.36cvss 5.5epss 0.01
In YARA 3.8.1, bytecode in a specially crafted compiled rule is exposed to information about its environment, in libyara/exec.c. This is a consequence of the design of the YARA virtual machine.
CVE-2018-19975MedDec 17, 2018
YARA
YARA
risk 0.36cvss 5.5epss 0.01
In YARA 3.8.1, bytecode in a specially crafted compiled rule can read data from any arbitrary address in memory, in libyara/exec.c. Specifically, OP_COUNT can read a DWORD.
CVE-2018-19974MedDec 17, 2018
YARA
YARA
risk 0.36cvss 5.5epss 0.01
In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack (not the YARA virtual stack).
CVE-2017-11328MedJul 17, 2017
YARA
YARA
risk 0.36cvss 5.5epss 0.01
Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file.