CVE-2023-37732

Опубликовано: 26 июл. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.

Ссылки

https://gist.github.com/ChanStormstout/02eea9cf5c002b42b2ff3de5ca939520
Third Party Advisory
https://github.com/yasm/yasm/issues/233
Exploit
https://gist.github.com/ChanStormstout/02eea9cf5c002b42b2ff3de5ca939520
Third Party Advisory
https://github.com/yasm/yasm/issues/233
Exploit

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:yasm_project:yasm:1.3.0.78.g4dc8:*:*:*:*:*:*:*

EPSS

Процентиль: 29%

0.00367

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVE-2023-37732

CVSS3: 5.5

ubuntu

около 3 лет назад

Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.

CVE-2023-37732

CVSS3: 5.5

redhat

около 3 лет назад

Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.

CVE-2023-37732

CVSS3: 5.5

msrc

около 1 года назад

Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.

CVE-2023-37732

CVSS3: 5.5

debian

около 3 лет назад

Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm ...

GHSA-4p37-82f3-xmhv

CVSS3: 5.5

github

около 3 лет назад

Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.

EPSS

Процентиль: 29%

0.00367

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-476