CVE-2017-9438: High severity VirusTotal yara vulnerability
Published Jun 5, 2017
·Updated
libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption) via a crafted rule (involving hex strings) that is mishandled in the yrreemit function, a different vulnerability than CVE-2017-9304.
Affected Software
1 affected component
VirusTotal yara=3.5.0
Remediation
Patch Available
Event History
Jun 5, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9438?
CVE-2017-9438 has been classified with a severity that can potentially lead to a denial of service.
2
How do I fix CVE-2017-9438?
To fix CVE-2017-9438, upgrade YARA to a version later than 3.5.0 where this vulnerability has been addressed.
3
Which software is affected by CVE-2017-9438?
CVE-2017-9438 specifically affects YARA version 3.5.0.
4
What type of attack does CVE-2017-9438 allow?
CVE-2017-9438 allows remote attackers to cause a denial of service through crafted rules.
5
What function is mismanaged leading to CVE-2017-9438?
The vulnerability in CVE-2017-9438 pertains to mishandling in the _yr_re_emit function within the regexp module.