PT-2022-10258 · Yasm+1 · Yasm+1

Clingto · Published 2022-07-26 · Updated 2022-07-28 · CVE-2021-33462

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions yasm version 1.3.0

Description A use-after-free issue was discovered in the expr traverse nodes post() function located in the libyasm/expr.c file. This issue affects the functionality of the software, potentially leading to instability or security concerns.

Recommendations For yasm version 1.3.0, consider avoiding the use of the expr traverse nodes post() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

AZL-10332

AZL-35372

CVE-2021-33462

Affected Products

Debian

Yasm

References · 11

• 🔥 https://github.com/yasm/yasm/issues/165 · Exploit
• https://osv.dev/vulnerability/AZL-10332 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-33462 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-33462 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-33462 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-35372 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-33462 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33462 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-33462 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-33462 · Vendor Advisory
• https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d · Note