CVE-2023-31975

Опубликовано: 09 мая 2023

Источник: nvd

CVSS3: 3.3

EPSS Низкий

Описание

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

Ссылки

http://www.openwall.com/lists/oss-security/2023/06/20/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/10
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/13
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/7
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/8
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/9
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/22/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/22/3
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/22/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/23/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/23/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/23/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/23/8
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/23/9
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/24/1
Mailing List
Third Party Advisory
https://github.com/yasm/yasm/issues/210
Exploit
Issue Tracking
http://www.openwall.com/lists/oss-security/2023/06/20/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/06/21/10
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:yasm_project:yasm:1.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 4%

0.0002

Низкий

3.3 Low

CVSS3

Дефекты

CWE-401

Связанные уязвимости

CVE-2023-31975

CVSS3: 3.3

ubuntu

больше 2 лет назад

CVE-2023-31975

CVSS3: 3.3

msrc

больше 2 лет назад

Описание отсутствует

CVE-2023-31975

CVSS3: 3.3

debian

больше 2 лет назад

yasm v1.3.0 was discovered to contain a memory leak via the function y ...

GHSA-g56w-fm5h-cwrp

CVSS3: 9.8

github

больше 2 лет назад

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c.

BDU:2024-06865

CVSS3: 3.3

fstec

больше 2 лет назад

Уязвимость функции yasm_intnum_copy ассемблера YASM, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 4%

0.0002

Низкий

3.3 Low

CVSS3

Дефекты

CWE-401