SUSE CVE-2023-49557

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasmsectionbcsfirst function in the libyasm/section.c component...

SUSE CVE-2023-49558

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandmmacparams function in the modules/preprocs/nasm/nasm-pp.c component...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via the dodirective function in the modules/preprocs/nasm/nasm-pp.c component. An attacker can cause a denial of service vulnerability. Remediation There is no fixed version for yasm. References - GitHub Issue - Vulnerabl...

Uncontrolled Resource Consumption ('Resource Exhaustion')

Overview Affected versions of this package are vulnerable to Uncontrolled Resource Consumption 'Resource Exhaustion' via the expandsmacro function in the nasm-pp.c component. An attacker can cause a crash the application by sending crafted input to trigger the issue. Remediation There is no fixed...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the exprdeleteterm function in the libyasm/expr.c component. An attacker can cause a crash or service by sending a crafted input. Remediation There is no fixed version for yasm. References - GitHub Issue - Vulnerable...

Improper Restriction of Operations

Overview Affected versions of this package are vulnerable to Improper Restriction of Operations via the yasmsectionbcsfirst function in the libyasm/section.c component. An attacker can cause a disruption of service by sending a crafted input. Remediation There is no fixed version for yasm...

Uncontrolled Resource Consumption ('Resource Exhaustion')

Overview Affected versions of this package are vulnerable to Uncontrolled Resource Consumption 'Resource Exhaustion' via the expandmmacparams function in the nasm-pp.c component. An attacker can cause a crash or disruption of service by sending crafted input. Remediation There is no fixed version...

CVE-2023-49555

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandsmacro function in the modules/preprocs/nasm/nasm-pp.c component...

AZL-33358 CVE-2023-49558 affecting package yasm 1.3.0-17

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandmmacparams function in the modules/preprocs/nasm/nasm-pp.c component...

DEBIAN-CVE-2023-49558

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandmmacparams function in the modules/preprocs/nasm/nasm-pp.c component...

AZL-33356 CVE-2023-49555 affecting package yasm 1.3.0-17

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandsmacro function in the modules/preprocs/nasm/nasm-pp.c component...

AZL-35389 CVE-2023-49555 affecting package yasm 1.3.0-17

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandsmacro function in the modules/preprocs/nasm/nasm-pp.c component...

AZL-35388 CVE-2023-49556 affecting package yasm 1.3.0-17

Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the exprdeleteterm function in the libyasm/expr.c component...

CVE-2023-49556

Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the exprdeleteterm function in the libyasm/expr.c component...

CVE-2023-49558

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandmmacparams function in the modules/preprocs/nasm/nasm-pp.c component...

AZL-35394 CVE-2023-49557 affecting package yasm 1.3.0-17

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasmsectionbcsfirst function in the libyasm/section.c component...

DEBIAN-CVE-2023-49556

Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the exprdeleteterm function in the libyasm/expr.c component...

CVE-2023-49557

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasmsectionbcsfirst function in the libyasm/section.c component...

CVE-2023-49555

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandsmacro function in the modules/preprocs/nasm/nasm-pp.c component...

AZL-33355 CVE-2023-49556 affecting package yasm 1.3.0-17

Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the exprdeleteterm function in the libyasm/expr.c component...