ID CVE-2018-12035
Summary In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds write vulnerability in yr_execute_code in libyara/exec.c.
References
Vulnerable Configurations
  • cpe:2.3:a:virustotal:yara:1.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:1.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:1.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:1.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:2.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:2.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:2.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:2.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:3.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:3.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:3.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:3.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:3.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:3.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:3.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:3.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:3.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:3.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:3.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:3.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:3.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:3.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:3.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:3.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:3.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:3.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:3.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:3.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:virustotal:yara:3.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:virustotal:yara:3.7.1:*:*:*:*:*:*:*
CVSS
Base: 6.8 (as of 01-08-2018 - 13:23)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
refmap via4
confirm https://github.com/VirusTotal/yara/issues/891
misc
Last major update 01-08-2018 - 13:23
Published 15-06-2018 - 16:29
Last modified 01-08-2018 - 13:23
Back to Top