CVE-2023-29581

Katalog CVE

CVSS 5.5 · Medium EPSS 0,34%

Kerentanan pada yasm project yasm. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

yasm 1.3.0.55.g101bc has a segmentation violation in the function delete_Token at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to be input validation before data reaches libyasm, or a sandbox in which the application runs.

Rincian

Terbit di NVD

12 April 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/yasm/yasm/issues/216 exploit · issue tracking · advisory pihak ketiga
• https://github.com/z1r00/fuzz_vuln/blob/main/yasm/segv/delete_Token/readme.md exploit · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2186333
• https://github.com/yasm/yasm/blob/master/SECURITY.md