Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-29580
HistoryApr 12, 2023 - 12:00 a.m.

CVE-2023-29580

2023-04-1200:00:00
ubuntu.com
ubuntu.com
7
cve-2023-29580
yasm
segmentation violation
yasm_expr_create
cli
tool crash
unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

23.7%

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via
the component yasm_expr_create at /libyasm/expr.c.

Notes

Author Note
rodrigo-zaiden CLI tool crash only.

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

23.7%