CVE-2017-9304
First published: Wed May 31 2017(Updated: )
libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption) via a crafted rule that is mishandled in the _yr_re_emit function.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VirusTotal yara | =3.5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/weakness
- vendor/virustotal
- canonical/virustotal yara
- version/virustotal yara/3.5.0