PT-2023-4599 · Yasm+3 · Yasm+3
Chanstormstout
·
Publicado
2023-07-26
·
Atualizado
2024-08-08
·
CVE-2023-37732
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Yasm version 1.3.0.78
Description
The issue is related to a NULL Pointer Dereference in the components /libyasm/intnum.c and /elf/elf.c of the Yasm assembler. This allows an attacker to cause a denial of service via a crafted file. The exploitation of this issue can enable a remote attacker to disrupt service.
Recommendations
For Yasm version 1.3.0.78, consider avoiding the use of the affected components /libyasm/intnum.c and /elf/elf.c until a patch is available. As a temporary workaround, restrict the processing of crafted files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Debian
Red Os
Yasm