CVE-2016-10211

moderate-risk

Published 2017-04-03

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted rule that is mishandled in the yr_parser_lookup_loop_variable function.

Do I need to act?

0.79% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / LOW complexity

Affected Products (1)

Yara

Affected Vendors

Virustotal

References (6)

http://www.securityfocus.com/bid/98078

Patch https://github.com/VirusTotal/yara/commit/890c3f850293176c0e996a602ffa88b315f4e9...

Exploit https://github.com/VirusTotal/yara/issues/575

http://www.securityfocus.com/bid/98078

Patch https://github.com/VirusTotal/yara/commit/890c3f850293176c0e996a602ffa88b315f4e9...

Exploit https://github.com/VirusTotal/yara/issues/575

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 3/34 · Minimal

Exposure 5/34 · Minimal