CVE-2016-10210

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2016-10210

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-10210.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2016-10210

Related

Published

2017-04-03T05:59:00Z

Modified

2025-01-08T09:58:47.706306Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

libyara/lexer.l in YARA 3.5.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted rule that is mishandled in the yygetnext_buffer function.

References

Affected packages

Debian:11 / yara

Package

Name: yara
Purl: pkg:deb/debian/yara?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.5.0+dfsg-9

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / yara

Package

Name: yara
Purl: pkg:deb/debian/yara?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.5.0+dfsg-9

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / yara

Package

Name: yara
Purl: pkg:deb/debian/yara?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.5.0+dfsg-9

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/virustotal/yara

Affected ranges

Type: GIT
Repo: https://github.com/virustotal/yara
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

3119b232c9c453c98d8fa8b6ae4e37ba18117cd4

Fixed

3119b232c9c453c98d8fa8b6ae4e37ba18117cd4

Affected versions

v2.*

v2.0.0

v2.1.0

v3.*

v3.0.0

v3.1.0

v3.2.0

v3.3.0

v3.4.0