yasm Security Vulnerabilities

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in YASM version 1.3.0.86.g9def, which stems from the presence of a buffer overflow vulnerability. An attacker can exploit this vulnerability to cause a denial of service DOS via the...

CVE-2023-49554

CVE-2023-49554 concerns YASM, specifically version 1.3.0.86.g9def, where a Use After Free in the do_directive path of modules/preprocs/nasm/nasm-pp.c can lead to denial of service. The vulnerability is described with local attack vector, low complexity, with user interaction required, and an avai...

CVE-2023-49557

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasmsectionbcsfirst function in the libyasm/section.c component...

PT-2024-2671 · Yasm +2 · Yasm +2

Name of the Vulnerable Software and Affected Versions: YASM version 1.3.0.86.g9def Description: The issue is related to the yasm section bcs first function in the libyasm/section.c component, which allows a remote attacker to cause a denial of service due to uncontrolled resource consumption. Thi...

PT-2024-2674 · Yasm +2 · Yasm +2

Name of the Vulnerable Software and Affected Versions: YASM version 1.3.0.86.g9def Description: The issue is related to a Use After Free vulnerability in the do directive function, located in the modules/preprocs/nasm/nasm-pp.c component. This vulnerability allows a remote attacker to cause a...

CVE-2023-49555

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandsmacro function in the modules/preprocs/nasm/nasm-pp.c component...

PT-2024-2672 · Yasm +2 · Yasm +2

Name of the Vulnerable Software and Affected Versions: YASM version 1.3.0.86.g9def Description: The issue is related to a buffer overflow vulnerability in the expr delete term function of the YASM assembler, which can lead to a denial of service. This vulnerability allows a remote attacker to cau...

CVE-2023-49555

CVE-2023-49555 affects YASM 1.3.0.86.g9def. The vulnerability resides in the NASM preprocessing path, expand_smacro in modules/preprocs/nasm/nasm-pp.c, and is described as allowing a denial of service. The CVE shows a Medium base score (5.5) with availability impact (A) High, and an attack vector...

CVE-2023-49556

Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the exprdeleteterm function in the libyasm/expr.c component...

CVE-2023-49558: Undefined Security Weakness

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandmmacparams function in the modules/preprocs/nasm/nasm-pp.c component...

CVE-2023-49557

CVE-2023-49557 affects YASM 1.3.0.86.g9def, exposing a denial of service via libyasm/section.c (yasm_section_bcs_first). CVSS: LOCAL, user interaction required; impact: availability loss. Connected PT-2024-2670 notes the vulnerable area is expand mmac params in nasm/nasm-pp.c and suggests a tempo...

CVE-2023-49554: Use After Free

Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the dodirective function in the modules/preprocs/nasm/nasm-pp.c component...

CVE-2023-49554

Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the dodirective function in the modules/preprocs/nasm/nasm-pp.c component...

CVE-2023-49556

CVE-2023-49556 describes a buffer overflow in YASM 1.3.0.86.g9def, exploitable via the expr_delete_term function in the libyasm/expr.c component. The vulnerability can allow a remote attacker to cause a denial of service. The provided connected documents confirm the affected product/version and t...

CVE-2023-49556

Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the exprdeleteterm function in the libyasm/expr.c component...

CVE-2023-49554

Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the dodirective function in the modules/preprocs/nasm/nasm-pp.c component...

CVE-2023-49558

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandmmacparams function in the modules/preprocs/nasm/nasm-pp.c component...

Medium: yasm

Issue Overview: Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file. CVE-2023-37732 Affected Packages: yasm Note: This advisory is applicable to Amazon Linux 2 - Graphicsmagick1.3...

The vulnerability of the /libyasm/intnum.c and /elf.c components of the Yasm assembler allows a hacker to trigger a service failure.

The vulnerability in the components /libyasm/intnum.c and /elf/elf.c of the Yasm assembler is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure through the created file...

OESA-2023-1544 yasm security update

Yasm is a complete rewrite of the NASM assembler under the “new” BSD License. Security Fixes: yasm v1.3.0 was discovered to contain a memory leak via the function yasmintnumcopy at /libyasm/intnum.c.CVE-2023-31975...