PT-2023-9348 · Yasm+3 · Yasm+3

Randomssr · Publicado 2023-05-09 · Atualizado 2026-03-29 · CVE-2023-31975

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions yasm version 1.3.0

Description The issue is related to a memory leak in the yasm intnum copy function of the YASM assembler. This memory leak occurs due to the lack of memory release after its effective term of service. Exploitation of this issue could allow an attacker to cause a denial of service.

Recommendations For yasm version 1.3.0, consider disabling the yasm intnum copy function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

ALT-PU-2024-10794

AZL-26632

AZL-35383

BDU:2024-06865

CVE-2023-31975

OESA-2023-1543

OESA-2023-1544

OESA-2024-1062

OESA-2024-1064

OESA-2024-1131

OESA-2024-1132

Produtos afetados

Alt Linux

Debian

Red Os

Yasm

Referências · 49

• 🔥 https://github.com/yasm/yasm/issues/210 · Exploit
• https://github.com/yasm/yasm/pull/231 · Nota
• https://t.me/cibsecurity/63599 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-31975 · Nota de Segurança
• https://t.me/cvenotify/53001 · Publicação no Telegram
• https://osv.dev/vulnerability/ROOT-OS-ALPINE-318-CVE-2023-31975 · Aviso do Fabricante
• https://t.me/cvenotify/52883 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2024-06865 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-31975 · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2024-1131 · Aviso do Fabricante
• https://osv.dev/vulnerability/AZL-35383 · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2024-1062 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2023/06/23/9 · Nota
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1064 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-31975 · Aviso do Fabricante