207 matches found
PT-2023-23549 · Yasm +1 · Yasm +1
Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0 Description: The issue is related to a use after free via the function error at /nasm/nasm-pp.c. Note that multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...
yasm 资源管理错误漏洞
yasm is a completely rewritten Netwide assembler from the yasm open source. A resource management error vulnerability exists in yasm v1.3.0, which stems from a post-release reuse issue in function ppgetline in /nasm/nasm-pp.c. The vulnerability is caused by the use of the function ppgetline in th...
yasm 安全漏洞
yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version 1.3.0.55.g101bc, which stems from a segmentation violation in the function deleteToken on /nasm/nasm-pp.c. The vulnerability is caused by an error in the function deleteToke...
pp-in.com Cross Site Scripting vulnerability OBB-3225101
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE CVE-2017-17813
In Netwide Assembler NASM 2.14rc0, there is a use-after-free in the pplistonemacro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors...
PT-2023-1330
Name of the Vulnerable Software and Affected Versions Perl affected versions not specified Description The issue is related to the pp select function in the Perl interpreter, which is associated with incorrect clearing of the global variable PL DEFOUT. Exploitation of this issue may allow an...
pp-viken.no Cross Site Scripting vulnerability OBB-3143399
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious Package
Overview dl-pp-latm is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
CVE-2021-33464
An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in incfopen in modules/preprocs/nasm/nasm-pp.c...
CVE-2021-33456
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in hash in modules/preprocs/nasm/nasm-pp.c...
CVE-2021-33467
An issue was discovered in yasm version 1.3.0. There is a use-after-free in ppgetline in modules/preprocs/nasm/nasm-pp.c...
AZL-10337 CVE-2021-33467 affecting package yasm 1.3.0-17
An issue was discovered in yasm version 1.3.0. There is a use-after-free in ppgetline in modules/preprocs/nasm/nasm-pp.c...
UBUNTU-CVE-2021-33467
An issue was discovered in yasm version 1.3.0. There is a use-after-free in ppgetline in modules/preprocs/nasm/nasm-pp.c...
Design/Logic Flaw
An issue was discovered in yasm version 1.3.0. There is a use-after-free in ppgetline in modules/preprocs/nasm/nasm-pp.c...
CVE-2021-33460
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in ifcondition in modules/preprocs/nasm/nasm-pp.c...
UBUNTU-CVE-2021-33464
An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in incfopen in modules/preprocs/nasm/nasm-pp.c...
UBUNTU-CVE-2021-33460
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in ifcondition in modules/preprocs/nasm/nasm-pp.c...
CVE-2021-33465
The CVE-2021-33465 issue affects yasm v1.3.0. It is a vulnerability in the preprocessor path (expand_mmacro() in modules/preprocs/nasm/nasm-pp.c) that causes a NULL pointer dereference. This is documented with a Local attack vector, Low attack complexity, No privileges required, and User interact...
