OSV-2021-1333

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/yara/OSV-2021-1333.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-1333
Published
2021-09-20T00:00:16.641649Z
Modified
2022-04-13T03:04:42.265452Z
Summary
Heap-buffer-overflow in pe_get_section_full_name
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38952

Crash type: Heap-buffer-overflow READ 1
Crash state:
pe_get_section_full_name
pe__load
yr_modules_load
References

Affected packages

OSS-Fuzz / yara

Package

Name
yara
Purl
pkg:generic/yara

Affected ranges

Type
GIT
Repo
https://github.com/VirusTotal/yara.git
Events
Introduced
5cc28d24a251370218448100de4e9817e0d9233e
Fixed
ae503e9671b274802cb07dc032b5e5cea28773bd

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/yara/OSV-2021-1333.yaml"