27 matches found
UBUNTU-CVE-2021-33464
An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in incfopen in modules/preprocs/nasm/nasm-pp.c...
UBUNTU-CVE-2021-33460
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in ifcondition in modules/preprocs/nasm/nasm-pp.c...
CVE-2021-33465
The CVE-2021-33465 issue affects yasm v1.3.0. It is a vulnerability in the preprocessor path (expand_mmacro() in modules/preprocs/nasm/nasm-pp.c) that causes a NULL pointer dereference. This is documented with a Local attack vector, Low attack complexity, No privileges required, and User interact...
CVE-2021-33466
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expandsmacro in modules/preprocs/nasm/nasm-pp.c...
CVE-2021-33467
An issue was discovered in yasm version 1.3.0. There is a use-after-free in ppgetline in modules/preprocs/nasm/nasm-pp.c...
CVE-2021-33458
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in findcc in modules/preprocs/nasm/nasm-pp.c...
yasm 代码问题漏洞
yasm is yasm open source a completely rewritten Netwide assembler. A denial of service vulnerability exists in yasm version 1.3.0, which stems from the presence of a NULL pointer dereference in the findcc function in modules/preprocs/nasm/nasm-pp.c. An attacker could exploit this vulnerability to...