Pavol Odlevak issues

Repositories
Issues
Comments

Results 1 issues of


                                            Pavol Odlevak

rfxn.yara clamav error and a false positive on openssl tls1.h

Seems latest rfxn database identifies `openssl-1.1.1c/include/openssl/tls1.h` as `YARA.php_malware_hexinject.UNOFFICIAL`. To replicate: ```sh mkdir /tmp/scan cd /tmp/scan wget https://anaconda.org/conda-forge/openssl/1.1.1c/download/linux-64/openssl-1.1.1c-h516909a_0.tar.bz2 tar xf openssl-1.1.1c-h516909a_0.tar.bz2 rm -f /var/lib/clamav/rfxn.* ``` Plain clamscan without rfxn db: ```sh...