{"id":"CVE-2017-11328","details":"Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file.","modified":"2026-07-08T12:05:27.987388Z","published":"2017-07-17T13:18:20.173Z","references":[{"type":"ADVISORY","url":"https://github.com/VirusTotal/yara/commit/4a342f01e5439b9bb901aff1c6c23c536baeeb3f"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/virustotal/yara","events":[{"introduced":"8e851260c31a678b89034d084c318bc12b67f7df"},{"last_affected":"06589f77ecfc6554f3a419255fe910ae3c503399"},{"fixed":"4a342f01e5439b9bb901aff1c6c23c536baeeb3f"}],"database_specific":{"cpe":["cpe:2.3:a:virustotal:yara:3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:virustotal:yara:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:virustotal:yara:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:virustotal:yara:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:virustotal:yara:3.4.0:*:*:*:*:*:*:*","cpe:2.3:a:virustotal:yara:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:virustotal:yara:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:virustotal:yara:3.6.1:*:*:*:*:*:*:*","cpe:2.3:a:virustotal:yara:3.6.2:*:*:*:*:*:*:*","cpe:2.3:a:virustotal:yara:3.6.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"3.0.0"},{"last_affected":"3.0.0"},{"introduced":"3.1.0"},{"last_affected":"3.1.0"},{"introduced":"3.2.0"},{"last_affected":"3.2.0"},{"introduced":"3.3.0"},{"last_affected":"3.3.0"},{"introduced":"3.4.0"},{"last_affected":"3.4.0"},{"introduced":"3.5.0"},{"last_affected":"3.5.0"},{"introduced":"3.6.0"},{"last_affected":"3.6.0"},{"introduced":"3.6.1"},{"last_affected":"3.6.1"},{"introduced":"3.6.2"},{"last_affected":"3.6.2"},{"introduced":"3.6.3"},{"last_affected":"3.6.3"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["3.0.0","3.1.0","3.2.0","3.3.0","3.4.0","3.5.0","3.6.0","3.6.1","3.6.2","3.6.3","v3.6.3","v3.6.2","v3.6.1","v3.6.0","v3.4.0","v3.3.0","v3.2.0","v3.1.0","v3.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11328.json","vanir_signatures_modified":"2026-07-08T12:05:27Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"324705777057782691895313934710125693065","length":988},"id":"CVE-2017-11328-34964def","signature_type":"Function","signature_version":"v1","source":"https://github.com/virustotal/yara/commit/4a342f01e5439b9bb901aff1c6c23c536baeeb3f","target":{"function":"yr_object_array_set_item","file":"libyara/object.c"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/virustotal/yara/commit/4a342f01e5439b9bb901aff1c6c23c536baeeb3f","target":{"file":"tests/test-rules.c","function":"test_modules"},"deprecated":false,"digest":{"function_hash":"45076557500668251299605077535754881191","length":3315},"id":"CVE-2017-11328-40ac8f76"},{"signature_version":"v1","source":"https://github.com/virustotal/yara/commit/4a342f01e5439b9bb901aff1c6c23c536baeeb3f","target":{"file":"libyara/modules/tests.c"},"deprecated":false,"digest":{"line_hashes":["114913046958087037718737152000800856168","303402493744293866833559025193350100384","284804116677005452746888165511938534822","281920856999173747992864627079310810405"],"threshold":0.9},"id":"CVE-2017-11328-b368e98f","signature_type":"Line"},{"source":"https://github.com/virustotal/yara/commit/4a342f01e5439b9bb901aff1c6c23c536baeeb3f","target":{"file":"libyara/object.c"},"deprecated":false,"digest":{"line_hashes":["51759771513933441557698857444080657358","147414800417924708319395375809106822783","267171099067606627017360805785063548730","334385867148318352307733500909017573396","160545568683887489416728219391902486873","244245833980470298784494367257278772235","236410404055015517282616548381445990746","123748021024583038745410962062165420429"],"threshold":0.9},"id":"CVE-2017-11328-d4f727c1","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/virustotal/yara/commit/4a342f01e5439b9bb901aff1c6c23c536baeeb3f","target":{"file":"libyara/modules/tests.c","function":"module_load"},"deprecated":false,"digest":{"function_hash":"35304141080675584566892846950097265725","length":934},"id":"CVE-2017-11328-eabc765f"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}