ALT-BU-2024-9792-1
Branch sisyphus_riscv64 update bulletin.
Package yasm updated to version 1.3.0-alt3 for branch sisyphus_riscv64.
Closed vulnerabilities
BDU:2023-05006
Уязвимость компонентов /libyasm/intnum.c и /elf/elf.c ассемблера Yasm, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2021-33454
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr_get_intnum() in libyasm/expr.c.
Modified: 2025-01-29
CVE-2023-31975
yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.
- [oss-security] 20230620 CVE-2023-31975: memory leak in yasm
- [oss-security] 20230620 CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230624 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230624 Re: CVE-2023-31975: memory leak in yasm
- https://github.com/yasm/yasm/issues/210
- https://github.com/yasm/yasm/issues/210
Modified: 2024-11-21
CVE-2023-37732
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.