SecBoard
Zurück zur CVE-Übersicht

CVE-2017-8294

MEDIUM(5.0)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Risk Signal Score13/100 — NIEDRIG
  • CVSS 5 — Mittel

EPSS-Score

3%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

5

Technische Schwere

Beschreibung

libyara/re.c in the regex component in YARA 3.5.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted rule that is mishandled in the yr_re_exec function.

Referenzen