CVE-2023-31723

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expandmmacparams at /nasm/nasm-pp.c...

CVE-2023-31724

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function dodirective at /nasm/nasm-pp.c...

PT-2023-23436 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0.55.g101bc Description: A segmentation violation was discovered in yasm via the function do directive at /nasm/nasm-pp.c. Recommendations: For yasm version 1.3.0.55.g101bc, consider restricting access to the do directive...

CVE-2023-31725

Summary (CVE-2023-31725): yasm version 1.3.0.55.g101bc contains a heap-use-after-free via expand_mmac_params in yasm/modules/preprocs/nasm/nasm-pp.c. Affected component is the yasm assembler (preprocessor for NASM). Impact as per CVSS: local access with high impact on availability; no confidentia...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via the function expandmmacparams at /nasm/nasm-pp.c. Remediation There is no fixed version for yasm. References - GitHub Issue Credit: randomssr...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via the ppgetline function at /nasm/nasm-pp.c. Remediation There is no fixed version for yasm. References - GitHub Issue - PoC Credit: randomssr...

AZL-26634 CVE-2023-31973 affecting package yasm 1.3.0-17

yasm v1.3.0 was discovered to contain a use after free via the function expandmmacparams at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

DEBIAN-CVE-2023-31974

yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

AZL-35382 CVE-2023-31974 affecting package yasm 1.3.0-17

yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

DEBIAN-CVE-2023-31972

yasm v1.3.0 was discovered to contain a use after free via the function ppgetline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

Design/Logic Flaw

yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c...

CVE-2023-31974

yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

CVE-2023-31972

yasm v1.3.0 was discovered to contain a use after free via the function ppgetline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

UBUNTU-CVE-2023-31972

DISPUTED yasm v1.3.0 was discovered to contain a use after free via the function ppgetline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

CVE-2023-31973

yasm v1.3.0 was discovered to contain a use after free via the function expandmmacparams at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

yasm 资源管理错误漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A resource management error vulnerability exists in yasm version v1.3.0, which stems from a post-release reuse issue in /nasm/nasm-pp.c. The vulnerability is caused by an error in /nasm/nasm-pp.c, which is not supported...

SUSE CVE-2021-33457

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expandmmacparams in modules/preprocs/nasm/nasm-pp.c...

yasm find_cc function denial of service vulnerability

yasm is yasm open source a completely rewritten Netwide assembler. A denial of service vulnerability exists in yasm version 1.3.0, which stems from the presence of a NULL pointer dereference in the findcc function in modules/preprocs/nasm/nasm-pp.c. An attacker could exploit this vulnerability to...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the hash function in modules/preprocs/nasm/nasm-pp.c. Remediation There is no fixed version for yasm. References - GitHub Gist - GitHub Issue Credit: Clingto...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the function findcc in modules/preprocs/nasm/nasm-pp.c. Remediation There is no fixed version for yasm. References - GitHub Gist - GitHub Issue Credit: Clingto...