CVE-2018-19974

概要

参考情報

• bnbdr.github.io/posts/extracheese · Exploit
• VirusTotal/yara · Exploit
• bnbdr/swisscheese · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DFFXDAMP6GJ337LIOTVF5I4T6QGMN3ZR

yara のその他の脆弱性

• CVE-2023-40857高 8.8Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr_execute_cod function …
• CVE-2021-45429中 5.5A Buffer Overflow vulnerablity exists in VirusTotal YARA git commit: 605b2edf07ed8eb9a2c61ba22eb2e7c362f47ba7 via yr_set_configuration in ya…
• CVE-2021-3402緊急 9.1An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to…
• CVE-2019-19648高 7.8In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0, command_size may be inconsistent with the real size. A specially craf…
• CVE-2019-5020中 5.5An exploitable denial of service vulnerability exists in the object lookup functionality of Yara 3.8.1. A specially crafted binary file can …