CVE-2023-49554

Опубликовано: 03 янв. 2024

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_directive function in the modules/preprocs/nasm/nasm-pp.c component.

Ссылки

https://github.com/yasm/yasm/issues/249
Exploit
Issue Tracking
Vendor Advisory
https://github.com/yasm/yasm/issues/249
Exploit
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:yasm_project:yasm:1.3.0.86.g9def:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00426

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2023-49554

CVSS3: 5.5

ubuntu

почти 2 года назад

Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_directive function in the modules/preprocs/nasm/nasm-pp.c component.

CVE-2023-49554

redhat

почти 2 года назад

Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_directive function in the modules/preprocs/nasm/nasm-pp.c component.

CVE-2023-49554

msrc

3 месяца назад

Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_directive function in the modules/preprocs/nasm/nasm-pp.c component.

CVE-2023-49554

CVSS3: 5.5

debian

почти 2 года назад

Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote at ...

GHSA-4x52-4p76-xv6v

CVSS3: 5.5

github

почти 2 года назад

Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_directive function in the modules/preprocs/nasm/nasm-pp.c component.

EPSS

Процентиль: 61%

0.00426

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-416