PT-2022-12351 · Virustotal+4 · Virustotal Yara+4

0Xdd96 · Published 2022-02-04 · Updated 2026-03-09 · CVE-2021-45429

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions VirusTotal YARA (affected versions not specified)

Description A Buffer Overflow issue exists in VirusTotal YARA, specifically via yr set configuration in yara/libyara/libyara.c, which could cause a Denial of Service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALT-PU-2022-1583

CVE-2021-45429

USN-7177-1

USN-8080-1

Affected Products

Alt Linux

Debian

Linuxmint

Ubuntu

Virustotal Yara

References · 30

• 🔥 https://github.com/VirusTotal/yara/issues/1616 · Exploit
• https://osv.dev/vulnerability/USN-8080-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-45429 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-45429 · Security Note
• https://ubuntu.com/security/CVE-2017-9304 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-8294 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5924 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-19976 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-19974 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-45429 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7177-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8080-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3402 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-19975 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-12035 · Vendor Advisory