Bug 918545 (CVE-2023-40857)

Summary:	app-forensics/yara: arbitrary code execution
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED INVALID
Severity:	major	CC:	mario.haustein, proxy-maint, sam
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/VirusTotal/yara/issues/1945
Whiteboard:	B1 [ebuild]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2023-11-25 18:19:31 UTC

CVE-2023-40857:

Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr_execute_cod function in the exe.c component.

Upstream says this is invalid since the vector here is crafted (ie
trusted) yara rules.