AZL-35382 CVE-2023-31974 affecting package yasm 1.3.0-17

yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

AZL-26635 CVE-2023-31974 affecting package yasm 1.3.0-17

yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

DEBIAN-CVE-2023-31972

yasm v1.3.0 was discovered to contain a use after free via the function ppgetline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

UBUNTU-CVE-2023-31974

DISPUTED yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

Design/Logic Flaw

yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c...

Design/Logic Flaw

yasm v1.3.0 was discovered to contain a use after free via the function ppgetline at /nasm/nasm-pp.c...

CVE-2023-31974

yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

CVE-2023-31972

yasm v1.3.0 was discovered to contain a use after free via the function ppgetline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

UBUNTU-CVE-2023-31972

DISPUTED yasm v1.3.0 was discovered to contain a use after free via the function ppgetline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

PT-2023-23549 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0 Description: The issue is related to a use after free via the function error at /nasm/nasm-pp.c. Note that multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

CVE-2023-31973

yasm v1.3.0 was discovered to contain a use after free via the function expandmmacparams at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

yasm 资源管理错误漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A resource management error vulnerability exists in yasm v1.3.0, which stems from a post-release reuse issue in function ppgetline in /nasm/nasm-pp.c. The vulnerability is caused by the use of the function ppgetline in th...

CVE-2023-31973

yasm v1.3.0 was discovered to contain a use after free via the function expandmmacparams at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

yasm 资源管理错误漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A resource management error vulnerability exists in yasm version v1.3.0, which stems from a post-release reuse issue in /nasm/nasm-pp.c. The vulnerability is caused by an error in /nasm/nasm-pp.c, which is not supported...

CVE-2023-31974

yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

CVE-2022-44370

A heap-based buffer overflow flaw was found in nasm's quoteforpmake function in asm/nasm.c file. This flaw allows a local attacker to pass a specially crafted malicious input file, causing an application to halt or crash, leading to a denial of service...

CVE-2022-44369

A NULL pointer dereference flaw was found in nasm's aoutaddgotoffreloc function in output/outaout.c file. This flaw allows a local attacker to pass a specially crafted malicious input file, causing an application to halt or crash, leading to a denial of service...

CVE-2022-44368

A NULL pointer dereference flaw was found in nasm's objdirective function in output/outobj.c file. This flaw allows a local attacker to pass a specially crafted malicious input file, causing an application to halt or crash, leading to a denial of service...

Amazon Linux AMI : nasm (ALAS-2023-1737)

The version of nasm installed on the remote host is prior to 2.10.07-7.8. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1737 advisory. NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856 CVE-2022-44370 Tenable ha...

Important: nasm

Issue Overview: NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856 CVE-2022-44370 Affected Packages: nasm Issue Correction: Run yum update nasm or yum update --advisory ALAS-2023-1737 to update your system. New Packages: i686: ...