Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-31973
HistoryMay 09, 2023 - 12:00 a.m.

CVE-2023-31973

2023-05-0900:00:00
ubuntu.com
ubuntu.com
13
use after free
expand mmac params
nasm pp
unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0

Percentile

12.7%

DISPUTED yasm v1.3.0 was discovered to contain a use after free via
the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third
parties dispute this as a bug and not a vulnerability according to the YASM
security policy.

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0

Percentile

12.7%