CVE-2017-9304

CVE-2017-9304 describes a denial-of-service vulnerability in YARA 3.5.0, specifically within the libyara/re.c regexp module, affecting products like VirusTotal YARA. An attacker can trigger stack consumption by providing a specially crafted rule to the _yr_re_emit function. This vulnerability carries a high CVSS score of 7.5, indicating a network-exploitable issue with low attack complexity and a high impact on availability, though it has no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.