CVE-2023-31723

2023-05-1715:15:08

Debian Security Bug Tracker

security-tracker.debian.org

cve-2023-31723

discovery

yasm

segmentation violation

function

expand_mmac_params

nasm-pp.c

unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

19.0%

JSON

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.

OSVersionArchitecturePackageVersionFilename
Debian12allyasm<= 1.3.0-4yasm_1.3.0-4_all.deb
Debian11allyasm<= 1.3.0-2.1yasm_1.3.0-2.1_all.deb
Debian999allyasm<= 1.3.0-5yasm_1.3.0-5_all.deb
Debian13allyasm<= 1.3.0-5yasm_1.3.0-5_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	yasm	<= 1.3.0-4	yasm_1.3.0-4_all.deb
Debian	11	all	yasm	<= 1.3.0-2.1	yasm_1.3.0-2.1_all.deb
Debian	999	all	yasm	<= 1.3.0-5	yasm_1.3.0-5_all.deb
Debian	13	all	yasm	<= 1.3.0-5	yasm_1.3.0-5_all.deb