libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted r…

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

References

• 98078 vdb-entry
• https://github.com/VirusTotal/yara/commit/890c3f850293176c0e996a602ffa88b315f4e98f
• https://github.com/VirusTotal/yara/issues/575