CVE-2017-9465: High severity virustotal vulnerability
The yrarenawritedata function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain sensitive information from process memory via a crafted file that is mishandled in the yrrefastexec function in libyara/re.c and the yrscanmatchcallback function in libyara/scan.c.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9465?
CVE-2017-9465 is classified as a medium severity vulnerability due to its potential to cause denial of service and expose sensitive information.
How do I fix CVE-2017-9465?
To fix CVE-2017-9465, upgrade YARA to version 3.6.3 or later, where the vulnerability has been addressed.
What impact does CVE-2017-9465 have on my system?
CVE-2017-9465 can lead to application crashes and may allow unauthorized access to sensitive process memory.
Is CVE-2017-9465 exploitable remotely?
Yes, CVE-2017-9465 can be exploited remotely by crafting a malicious file that triggers the vulnerability.
Which version of YARA is affected by CVE-2017-9465?
CVE-2017-9465 specifically affects YARA version 3.6.1.