Bug 1459012 (CVE-2017-9438) - CVE-2017-9438 yara: Stack consumption via a crafted rule mishandled in the _ur_re_emit function
Summary: CVE-2017-9438 yara: Stack consumption via a crafted rule mishandled in the _u...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2017-9438
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1459013
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-06-06 06:45 UTC by Andrej Nemec
Modified: 2021-10-21 11:54 UTC (History)
1 user (show)

Fixed In Version: yara 3.6.0
Clone Of:
Environment:
Last Closed: 2021-10-21 11:54:23 UTC
Embargoed:

Attachments (Terms of Use)

Description Andrej Nemec 2017-06-06 06:45:56 UTC 
libyara/re.c in the regexp module in YARA 3.5.0 allows attackers to cause a denial of service (stack consumption) via a crafted rule (involving hex strings) that is mishandled in the _yr_re_emit function, a different vulnerability than CVE-2017-9304.

Upstream issue:

https://github.com/VirusTotal/yara/issues/674

Upstream patch:

https://github.com/VirusTotal/yara/commit/10e8bd3071677dd1fa76beeef4bc2fc427cea5e7
Comment 1 Andrej Nemec 2017-06-06 06:49:11 UTC 
Created yara tracking bugs for this issue:

Affects: epel-6 [bug 1459013]
Note You need to log in before you can comment on or make changes to this bug.