Lucene search
+L

9998 matches found

SUSE CVE
SUSE CVE
•added 2023/04/26 1:53 a.m.•11 views

SUSE CVE-2023-29582

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parseexpr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

5.5CVSS7.4AI score0.00345EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/04/26 1:53 a.m.•18 views

SUSE CVE-2023-29583

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parseexpr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

6.2CVSS7.4AI score0.00287EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/04/26 12:00 a.m.•15 views

PT-2023-35797 · Git +1 · Mongoose

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap buffer overflow read issue was identified, with a crash type of Heap-buffer-overflow READ 1. The crash occurred in the mg mqtt parse function,...

7.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2023/04/25 1:35 p.m.•16 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the parseexpr5 function in the /nasm/nasm-parse.c file. Remediation There is no fixed version for yasm. References - GitHub Issue - PoC Credit: z1r00...

7.3CVSS7AI score0.00287EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/04/25 12:00 a.m.•11 views

PT-2023-7434

Name of the Vulnerable Software and Affected Versions Avahi affected versions not specified Description A vulnerability exists in the avahi rdata parse function of Avahi, which is related to a reachable assertion. This issue can be exploited by an attacker to cause a denial of service...

6.2CVSS6.8AI score0.00328EPSS
SaveExploits0References98
osv_debian
osv_debian
•added 2023/04/24 1:15 p.m.•17 views

DEBIAN-CVE-2023-29582

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parseexpr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

5.5CVSS5.6AI score0.00345EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2023/04/24 1:15 p.m.•38 views

AZL-26346 CVE-2023-29582 affecting package yasm 1.3.0-17

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parseexpr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

5.5CVSS5.7AI score0.00345EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/04/24 1:15 p.m.•11 views

CVE-2023-29582

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parseexpr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

5.5CVSS6AI score0.00345EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2023/04/24 1:15 p.m.•16 views

DEBIAN-CVE-2023-29583

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parseexpr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

5.5CVSS5.6AI score0.00287EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/04/24 1:15 p.m.•18 views

CVE-2023-29583

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parseexpr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

6.2CVSS6AI score0.00287EPSS
SaveExploits1References3
osv_azl
osv_azl
•added 2023/04/24 1:15 p.m.•27 views

AZL-35396 CVE-2023-29582 affecting package yasm 1.3.0-17

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parseexpr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

5.5CVSS6AI score0.00345EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2023/04/24 1:15 p.m.•22 views

UBUNTU-CVE-2023-29582

DISPUTED yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parseexpr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

5.5CVSS5.8AI score0.00345EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2023/04/24 1:15 p.m.•30 views

UBUNTU-CVE-2023-29583

DISPUTED yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parseexpr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

5.5CVSS5.8AI score0.00287EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/04/24 12:00 a.m.•23 views

Yasm buffer error vulnerability

yasm is a completely rewritten Netwide assembler from the yasm open source. A buffer error vulnerability exists in yasm version 1.3.0.55.g101bc, which stems from the discovery of a contained stack overflow vulnerability through the parseexpr1 function of /nasm/nasm-parse.c...

5.5CVSS5.9AI score0.00345EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/04/24 12:00 a.m.•18 views

PT-2023-22322 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0.55.g101bc Description: A stack overflow issue was discovered in yasm via the parse expr1 function at /nasm/nasm-parse.c. This issue has been disputed by third parties, who argue it is a bug rather than a security issue due ...

5.5CVSS7.4AI score0.00345EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
•added 2023/04/24 12:00 a.m.•21 views

PT-2023-22323 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0.55.g101bc Description: A stack overflow issue was discovered in the parse expr5 function at /nasm/nasm-parse.c. This issue has been disputed by third parties, arguing it is a bug rather than a security issue, as yasm is a...

6.2CVSS7.4AI score0.00287EPSS
SaveExploits1References13
CNNVD
CNNVD
•added 2023/04/24 12:00 a.m.•23 views

Yasm buffer error vulnerability

yasm is a completely rewritten Netwide assembler from the yasm open source. A buffer error vulnerability exists in yasm version 1.3.0.55.g101bc, which stems from the discovery of a contained stack overflow vulnerability via the parseexpr5 function in /nasm/nasm-parse.c...

6.2CVSS5.9AI score0.00287EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/04/21 12:00 a.m.•9 views

PT-2023-35787 · Git +1 · Libheif

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the RegionGeometry Polygon::parse function, which is...

6.8AI score
SaveExploits0References2
osv_osv
osv_osv
•added 2023/04/20 2:00 p.m.•22 views

OSV-2023-328 Heap-buffer-overflow in RegionItem::parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58152 Crash type: Heap-buffer-overflow READ 1 Crash state: RegionItem::parse heif::HeifContext::interpretheiffile heif::HeifContext::read...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/04/20 12:00 a.m.•13 views

PT-2023-35786 · Heif · Heif

Name of the Vulnerable Software and Affected Versions: heif affected versions not specified Description: A heap buffer overflow issue was identified, which can cause a crash. The issue occurs in the RegionItem::parse function, specifically when heif::HeifContext interprets a HEIF file or reads fr...

7.5AI score
SaveExploits0References2
Rows per page
Query Builder