UBUNTU-CVE-2017-9304

Details

libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption) via a crafted rule that is mishandled in the _yr_re_emit function.

Affected Packages

yara

Ubuntu Pro 16.04 LTSUbuntu 16.04 LTS

Affected versions:

3.4.0+dfsg-23.4.0+dfsg-2build1

yara

Ubuntu 18.04 LTS

Affected versions:

3.6.3+dfsg-1ubuntu13.7.1-1ubuntu1

Fixed in:

3.7.1-1ubuntu2

References

REPORT

https://github.com/VirusTotal/yara/commit/925bcf3c3b0a28b5b78e25d9efda5c0bf27ae699

REPORT

https://github.com/VirusTotal/yara/issues/674

REPORT

https://ubuntu.com/security/CVE-2017-9304

REPORT

https://www.cve.org/CVERecord?id=CVE-2017-9304