CVE-2023-31975

Опубликовано: 09 мая 2023

Источник: nvd

CVSS3: 3.3

EPSS Низкий

Описание

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

Ссылки

http://www.openwall.com/lists/oss-security/2023/06/20/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/10
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/13
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/7
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/8
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/9
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/22/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/22/3
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/22/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/23/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/23/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/23/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/23/8
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/23/9
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/24/1
Mailing List
Third Party Advisory
https://github.com/yasm/yasm/issues/210
Exploit
Issue Tracking
http://www.openwall.com/lists/oss-security/2023/06/20/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/10
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:yasm_project:yasm:1.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 1%

0.00012

Низкий

3.3 Low

CVSS3

Дефекты

CWE-401

Связанные уязвимости

CVE-2023-31975

CVSS3: 3.3

ubuntu

около 2 лет назад

** DISPUTED ** yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

CVE-2023-31975

CVSS3: 3.3

msrc

около 2 лет назад

Описание отсутствует

CVE-2023-31975

CVSS3: 3.3

debian

около 2 лет назад

yasm v1.3.0 was discovered to contain a memory leak via the function y ...

ROS-20240904-06

CVSS3: 3.3

redos

10 месяцев назад

Уязвимость yasm

GHSA-g56w-fm5h-cwrp

CVSS3: 9.8

github

около 2 лет назад

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c.

EPSS

Процентиль: 1%

0.00012

Низкий

3.3 Low

CVSS3

Дефекты

CWE-401