Search CVE reports


Toggle filters

1 – 10 of 37 results


CVE-2024-22653

Medium priority
Needs evaluation

yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at section.c.

1 affected package

yasm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
yasm Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-25760

Low priority
Ignored

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

1 affected package

yasm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
yasm Not affected Not affected Not affected
Show less packages

CVE-2023-51258

Low priority
Needs evaluation

A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new_Token function in the modules/preprocs/nasm/nasm-pp:1512.

1 affected package

yasm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
yasm Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-49558

Medium priority
Needs evaluation

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_mmac_params function in the modules/preprocs/nasm/nasm-pp.c component.

1 affected package

yasm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
yasm Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-49557

Medium priority
Needs evaluation

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasm_section_bcs_first function in the libyasm/section.c component.

1 affected package

yasm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
yasm Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-49556

Medium priority
Needs evaluation

Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expr_delete_term function in the libyasm/expr.c component.

1 affected package

yasm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
yasm Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-49555

Medium priority
Needs evaluation

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_smacro function in the modules/preprocs/nasm/nasm-pp.c component.

1 affected package

yasm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
yasm Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-49554

Medium priority
Needs evaluation

Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_directive function in the modules/preprocs/nasm/nasm-pp.c component.

1 affected package

yasm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
yasm Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-37732

Medium priority
Needs evaluation

Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.

1 affected package

yasm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
yasm Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-31725

Medium priority
Needs evaluation

yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expand_mmac_params at yasm/modules/preprocs/nasm/nasm-pp.c.

1 affected package

yasm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
yasm Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages