Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-31974
HistoryMay 09, 2023 - 12:00 a.m.

CVE-2023-31974

2023-05-0900:00:00
ubuntu.com
ubuntu.com
13
yasm v1.3.0
use after free
nasm-pp.c
vulnerability

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0

Percentile

12.7%

DISPUTED yasm v1.3.0 was discovered to contain a use after free via
the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute
this as a bug and not a vulnerability according to the YASM security
policy.

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0

Percentile

12.7%