Known vulnerabilities in YARA

Vendor: VirusTotal
Software: YARA
Software CPE: cpe:2.3:a:virustotal:yara:*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting YARA YARA is affected by 23 known vulnerabilities: 3 high, 14 medium, 6 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98812 - Buffer overflow
CVE-2021-45429
CWE-120 Low
No
No
4.2.0 18.10.2024 SB2022020429
SB2024101814
SB2024101815
and 3 more
#VU50140 - Integer overflow
CVE-2021-3402
CWE-190 Medium
Available
No
4.0.4 29.01.2021 SB2021012810
SB2026030956
SB2021042719
and 3 more
#VU50078 - Out-of-bounds read
CWE-125 Medium
Available
No
4.0.4 28.01.2021 SB2021012810
#VU50077 - Out-of-bounds read
CWE-125 Medium
Available
No
4.0.4 28.01.2021 SB2021012810
#VU29370 - Integer overflow
CWE-190 High
No
No
4.0.2 29.06.2020 SB2020062911
#VU29369 - Use After Free
CWE-416 High
No
No
4.0.2 29.06.2020 SB2020062911
#VU23465 - Out-of-bounds read
CVE-2019-19648
CWE-125 High
No
No
- 09.12.2019 SB2019120910
SB2026030956
SB2021042719
and 3 more
#VU19932 - Improper Resource Shutdown or Release
CVE-2019-5020
CWE-404 Medium
No
No
3.10.0 05.08.2019 SB2019080501
#VU16658 - Exposure of sensitive information to an unauthorized actor
CVE-2018-19976
CWE-200 Low
No
No
- 23.12.2018 SB2018122308
SB2019032403
SB20190927290
and 3 more
#VU16657 - Exposure of sensitive information to an unauthorized actor
CVE-2018-19974
CWE-200 Low
No
No
- 23.12.2018 SB2018122308
SB2019032403
SB20190927290
and 3 more
#VU16656 - Exposure of sensitive information to an unauthorized actor
CVE-2018-19975
CWE-200 Low
No
No
- 23.12.2018 SB2018122308
SB2019032403
SB20190927290
and 3 more
#VU14223 - Out-of-bounds write
CVE-2018-12035
CWE-787 Low
No
No
3.8.0 08.08.2018 SB2018080808
SB2018082713
SB2018082714
and 2 more
#VU14222 - Exposure of sensitive information to an unauthorized actor
CVE-2018-12034
CWE-200 Low
No
No
3.8.0 07.08.2018 SB2018080808
SB2018082713
SB2018082714
and 2 more
#VU38691 - Memory corruption
CVE-2017-11328
CWE-119 Medium
No
No
- 17.07.2017 SB2017071729
SB2017071602
SB2017071603
and 4 more
#VU38890 - Out-of-bounds read
CVE-2017-9465
CWE-125 Medium
No
No
- 07.06.2017 SB2017060713
SB2017070314
SB2017070316
and 6 more
#VU38930 - Uncontrolled Recursion
CVE-2017-9304
CWE-674 Medium
No
No
- 31.05.2017 SB2017040315
SB2017070314
SB2017070316
and 6 more
#VU38995 - Use After Free
CVE-2017-8929
CWE-416 Medium
No
No
- 15.05.2017 SB2017040315
SB2017053016
SB2017053017
and 5 more
#VU39100 - Out-of-bounds read
CVE-2017-8294
CWE-125 Medium
No
No
- 27.04.2017 SB2017040315
SB2017041325
SB2017041326
and 3 more
#VU39292 - Out-of-bounds read
CVE-2017-5923
CWE-125 Medium
No
No
- 03.04.2017 SB2017040315
SB2017041325
SB2017041326
and 8 more
#VU39293 - Use After Free
CVE-2017-5924
CWE-416 Medium
No
No
- 03.04.2017 SB2017040315
SB2017041325
SB2017041326
and 8 more


Showing elements 1 - 20 out of 23