Skip to main content

Yara CVE-2017-11328

MEDIUM
Buffer Overflow (CWE-119)
2017-07-17 cve@mitre.org
5.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Jul 17, 2017 - 13:18 cve.org
MEDIUM 5.5

DescriptionCVE.org

Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file.

AnalysisAI

Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file. Affected products include: Virustotal Yara.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

More in Yara

View all
CVE-2021-3402 CRITICAL POC
9.1 May 14

An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could

CVE-2023-40857 HIGH POC
8.8 Aug 28

Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr_e

CVE-2019-19648 HIGH POC
7.8 Dec 09

In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0, command_size may be inconsistent with the real si

CVE-2018-12035 HIGH POC
7.8 Jun 15

In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds write vulnerability i

CVE-2018-12034 HIGH POC
7.8 Jun 15

In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in

CVE-2017-5923 HIGH POC
7.5 Apr 03

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and

CVE-2016-10211 HIGH POC
7.5 Apr 03

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application cra

CVE-2016-10210 HIGH POC
7.5 Apr 03

libyara/lexer.l in YARA 3.5.0 allows remote attackers to cause a denial of service (NULL pointer dereference and applica

CVE-2017-5924 HIGH POC
7.5 Apr 03

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application cra

CVE-2017-9465 HIGH POC
7.1 Jun 06

The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read an

CVE-2019-5020 MEDIUM POC
5.5 Jul 31

An exploitable denial of service vulnerability exists in the object lookup functionality of Yara 3.8.1. Rated medium sev

CVE-2018-19976 MEDIUM POC
5.5 Dec 17

In YARA 3.8.1, bytecode in a specially crafted compiled rule is exposed to information about its environment, in libyara

Share

CVE-2017-11328 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy