CVE-2017-9465

The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain…

published June 6, 2017

CVSS
—
EPSS
1%
Percentile
67.1
In the wild
Unconfirmed
What it is

The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain sensitive information from process memory via a crafted file that is mishandled in the yr_re_fast_exec function in libyara/re.c and the _yr_scan_match_callback function in libyara/scan.c.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01175 · 67.1th percentile
Published
2017-06-06T21:00Z
EPSS history
Timeline
  • 06 JUN 21:00Z
    The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain…
    cvelistv5