CVE-2016-10211 | BDVDB-2026-83633 Detail

Description#

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted rule that is mishandled in the yr_parser_lookup_loop_variable function.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/98078
https://github.com/VirusTotal/yara/commit/890c3f850293176c0e996a602ffa88b315f4e98f
https://github.com/VirusTotal/yara/issues/575

Exploit#

No public exploit known

History#

Version 12017-04-03Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.