769 matches found
DEBIAN-CVE-2023-37732
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file...
AZL-27658 CVE-2023-37732 affecting package yasm for versions less than 1.3.0-16
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file...
AZL-35395 CVE-2023-37732 affecting package yasm for versions less than 1.3.0-16
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file...
Null pointer dereference
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file...
UBUNTU-CVE-2023-37732
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file...
CVE-2023-37732
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file...
CVE-2023-37732
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file...
CVE-2023-37732
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file...
yasm 代码问题漏洞
yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in Yasm v1.3.0.78, which stems from a null pointer dereference vulnerability in the /libyasm/intnum.c and /elf/elf.c files. An attacker can exploit this vulnerability to cause a null pointe...
CVE-2023-37732
CVE-2023-37732 affects Yasm ; vulnerable component is the assembler library where a NULL pointer dereference in libyasm/intnum.c and /elf/elf.c enables a denial of service with a crafted file (version v1.3.0.78 ). Exploitation is described as a local vector with user interaction, per CVSS data. S...
PT-2023-4599 · Yasm +3 · Yasm +3
Name of the Vulnerable Software and Affected Versions: Yasm version 1.3.0.78 Description: The issue is related to a NULL Pointer Dereference in the components /libyasm/intnum.c and /elf/elf.c of the Yasm assembler. This allows an attacker to cause a denial of service via a crafted file. The...
CVE-2023-37732
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file...
CVE-2023-31975 affecting package yasm 1.3.0-13
CVE-2023-31975 affecting package yasm 1.3.0-13. A patched version of the package is available...
CVE-2023-31975 affecting package yasm for versions less than 1.3.0-14
CVE-2023-31975 affecting package yasm for versions less than 1.3.0-14. A patched version of the package is available...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a segmentation violation via the expandmmacparams function in the /nasm/nasm-pp.c file. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via the expandmmacparams function in the yasm/modules/preprocs/nasm/nasm-pp.c file. Remediation There is no fixed version for yasm. References - GitHub Issue - PoC Credit: DaisyPo...
SUSE CVE-2023-31723
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expandmmacparams at /nasm/nasm-pp.c...
SUSE CVE-2023-31724
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function dodirective at /nasm/nasm-pp.c...
SUSE CVE-2023-31725
yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expandmmacparams at yasm/modules/preprocs/nasm/nasm-pp.c...
SUSE CVE-2023-31972
yasm v1.3.0 was discovered to contain a use after free via the function ppgetline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...