NVD

Id
86697  
Name
CVE-2017-9465  
Description
The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain sensitive information from process memory via a crafted file that is mishandled in the yr_re_fast_exec function in libyara/re.c and the _yr_scan_match_callback function in libyara/scan.c.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:P)  
Pub Date
2017-06-17  
Published
2017-06-06  
Modified Date
2017-06-14  
Seq
2017-9465  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
420674 86697 CVE-2016-7522 [oss-security] 20160922 Re: CVE Requests: Various ImageMagick issues (as reported in the Debian BTS)  View
420675 86697 CVE-2016-7522 93131  View
420676 86697 CVE-2016-7522 https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537419  View
420677 86697 CVE-2016-7522 https://bugzilla.redhat.com/show_bug.cgi?id=1378751  View
420678 86697 CVE-2016-7522 https://github.com/ImageMagick/ImageMagick/commit/4b1b9c0522628887195bad3a6723f7000b0c9a58  View
420679 86697 CVE-2016-7522 https://github.com/ImageMagick/ImageMagick/issues/93  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68403 JVNDB-2017-004660 YARA の yr_arena_write_data 関数におけるサービス運用妨害 (DoS) の脆弱性 YARA の yr_arena_write_data 関数には、サービス運用妨害 (バッファオーバーリードおよびアプリケーションクラッシュ) 状態にされる、またはプロセスメモリから重要な情報を取得される脆弱性が存在します。 CVE-2017-9465 0 CVE-2017-9465 86697 5.8 7.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004660.html 2017-06-06 2017-07-04 View