ALT-PU-2024-9790-1
Package yasm updated to version 1.3.0-alt3 for branch sisyphus_riscv64.
Closed vulnerabilities
Published: 2023-07-26
BDU:2023-05006
Уязвимость компонентов /libyasm/intnum.c и /elf/elf.c ассемблера Yasm, позволяющая нарушителю вызвать отказ в обслуживании
Severity: MEDIUM (5.5)
Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
Published: 2022-07-26
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2021-33454
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr_get_intnum() in libyasm/expr.c.
Severity: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
Published: 2023-05-09
Modified: 2025-01-29
Modified: 2025-01-29
CVE-2023-31975
yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.
Severity: LOW (3.3)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
References:
- [oss-security] 20230620 CVE-2023-31975: memory leak in yasm
- [oss-security] 20230620 CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230624 Re: CVE-2023-31975: memory leak in yasm
- [oss-security] 20230624 Re: CVE-2023-31975: memory leak in yasm
- https://github.com/yasm/yasm/issues/210
- https://github.com/yasm/yasm/issues/210
Published: 2023-07-27
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2023-37732
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.
Severity: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References: