Summary
It was discovered that YARA did not properly sanitize its
configuration settings. An attacker could potentially exploit this issue to
cause a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | yara | 4.1.3-1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
A Buffer Overflow vulnerablity exists in VirusTotal YARA git commit: 605b2edf07ed8eb9a2c61ba22eb2e7c362f47ba7 via yr_se…
References
-
report
https://ubuntu.com/security/CVE-2021-45429