Description (CNA)
An exploitable denial of service vulnerability exists in the object lookup functionality of Yara 3.8.1. A specially crafted binary file can cause a negative value to be read to satisfy an assert, resulting in Denial of Service. An attacker can create a malicious binary to trigger this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Yara Object | affected Yara 3.8.1 |
CWE
CWE-617
References
ADP enrichment
No English description supplied.