CVE-2021-33465

2022-07-2613:15:09

Debian Security Bug Tracker

security-tracker.debian.org

yasm

null pointer

dereference

expand_mmacro

nasm-pp.c

issue

security

unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

23.8%

JSON

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmacro() in modules/preprocs/nasm/nasm-pp.c.

OSVersionArchitecturePackageVersionFilename
Debian12allyasm<= 1.3.0-4yasm_1.3.0-4_all.deb
Debian11allyasm<= 1.3.0-2.1yasm_1.3.0-2.1_all.deb
Debian999allyasm<= 1.3.0-5yasm_1.3.0-5_all.deb
Debian13allyasm<= 1.3.0-5yasm_1.3.0-5_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	yasm	<= 1.3.0-4	yasm_1.3.0-4_all.deb
Debian	11	all	yasm	<= 1.3.0-2.1	yasm_1.3.0-2.1_all.deb
Debian	999	all	yasm	<= 1.3.0-5	yasm_1.3.0-5_all.deb
Debian	13	all	yasm	<= 1.3.0-5	yasm_1.3.0-5_all.deb