PT-2023-9348 · Yasm+3 · Yasm+3

Randomssr · Published 2023-05-09 · Updated 2026-03-29 · CVE-2023-31975

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions yasm version 1.3.0

Description The issue is related to a memory leak in the yasm intnum copy function of the YASM assembler. This memory leak occurs due to the lack of memory release after its effective term of service. Exploitation of this issue could allow an attacker to cause a denial of service.

Recommendations For yasm version 1.3.0, consider disabling the yasm intnum copy function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALT-PU-2024-10794

AZL-26632

AZL-35383

BDU:2024-06865

CVE-2023-31975

OESA-2023-1543

OESA-2023-1544

OESA-2024-1062

OESA-2024-1064

OESA-2024-1131

OESA-2024-1132

Affected Products

Alt Linux

Debian

Red Os

Yasm

References · 49

• 🔥 https://github.com/yasm/yasm/issues/210 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-31975 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-ALPINE-318-CVE-2023-31975 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06865 · Security Note
• https://osv.dev/vulnerability/CVE-2023-31975 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1131 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-35383 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1062 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-31975 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-31975 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-31975 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-31975 · Security Note
• https://osv.dev/vulnerability/OESA-2023-1543 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1064 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-31975 · Vendor Advisory