CVE-2018-12034 - In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yr_execute_code in libyara/exec.c

Back Back to CVE browser

HIGH

In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yr_execute_code in libyara/exec.c

Published Jun 15, 2018

7.8

HIGH

CVSS 3.0

EPSS 1.34%

Description

In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yr_execute_code in libyara/exec.c.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (3)

https://bnbdr.github.io/posts/swisscheese/
x_refsource_MISCExploitThird Party Advisory
https://github.com/VirusTotal/yara/issues/891
x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://github.com/bnbdr/swisscheese
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://bnbdr.github.io/posts/swisscheese/		x_refsource_MISCExploitThird Party Advisory
https://github.com/VirusTotal/yara/issues/891		x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://github.com/bnbdr/swisscheese		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 15, 2018

Updated Aug 5, 2024

Reserved Jun 7, 2018

Link CVE-2018-12034

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-12034

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-12034