UBUNTU-CVE-2018-12034

Details

In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yr_execute_code in libyara/exec.c.

Affected Packages

yara

Ubuntu Pro 16.04 LTSUbuntu 16.04 LTS

Affected versions:

3.4.0+dfsg-23.4.0+dfsg-2build1

yara

Ubuntu Pro 18.04 LTSUbuntu 18.04 LTS

Affected versions:

3.6.3+dfsg-1ubuntu13.7.1-1ubuntu13.7.1-1ubuntu2

References

REPORT

https://bnbdr.github.io/posts/swisscheese/

REPORT

https://github.com/VirusTotal/yara/issues/891

REPORT

https://github.com/bnbdr/swisscheese

REPORT

https://ubuntu.com/security/CVE-2018-12034

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-12034