CVE-2023-31724

2023-05-1715:15:08

Debian Security Bug Tracker

security-tracker.debian.org

yasm version 1.3.0.55.g101bc

segmentation violation

do_directive function

nasm-pp.c

unix

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

31.1%

JSON

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.

OSVersionArchitecturePackageVersionFilename
Debian12allyasm<= 1.3.0-4yasm_1.3.0-4_all.deb
Debian11allyasm<= 1.3.0-2.1yasm_1.3.0-2.1_all.deb
Debian10allyasm<= 1.3.0-2yasm_1.3.0-2_all.deb
Debian999allyasm<= 1.3.0-5yasm_1.3.0-5_all.deb
Debian13allyasm<= 1.3.0-5yasm_1.3.0-5_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	yasm	<= 1.3.0-4	yasm_1.3.0-4_all.deb
Debian	11	all	yasm	<= 1.3.0-2.1	yasm_1.3.0-2.1_all.deb
Debian	10	all	yasm	<= 1.3.0-2	yasm_1.3.0-2_all.deb
Debian	999	all	yasm	<= 1.3.0-5	yasm_1.3.0-5_all.deb
Debian	13	all	yasm	<= 1.3.0-5	yasm_1.3.0-5_all.deb