CVE-2019-5020

CVE-2019-5020 describes a denial of service vulnerability in Yara 3.8.1, specifically within its object lookup functionality, affecting products like VirusTotal Yara. An attacker can craft a malicious binary file that, when processed, causes a negative value to be read, triggering an assert and leading to a denial of service. This vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low complexity, requiring user interaction, and resulting in high availability impact. There is no evidence of active exploitation, publicly available exploit code in Metasploit, Nuclei, or ExploitDB, and minimal community discussion or media coverage.