PT-2024-2674 · Yasm+2 · Yasm+2

Vorfreuder · Published 2024-01-02 · Updated 2024-04-09 · CVE-2023-49554

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions YASM version 1.3.0.86.g9def

Description The issue is related to a Use After Free vulnerability in the do directive() function, located in the modules/preprocs/nasm/nasm-pp.c component. This vulnerability allows a remote attacker to cause a denial of service. The vulnerability is associated with memory handling errors, which can be exploited by an attacker to disrupt service.

Recommendations For YASM version 1.3.0.86.g9def, consider disabling the do directive() function as a temporary workaround until a patch is available. Restrict access to the modules/preprocs/nasm/nasm-pp.c component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

AZL-33357

AZL-35393

BDU:2024-02783

CVE-2023-49554

Affected Products

Debian

Red Os

Yasm

References · 17

• 🔥 https://github.com/yasm/yasm/issues/249 · Exploit
• https://osv.dev/vulnerability/AZL-35393 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-49554 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-49554 · Security Note
• https://bdu.fstec.ru/vul/2024-02783 · Security Note
• https://osv.dev/vulnerability/CVE-2023-49554 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-49554 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-49554 · Security Note
• https://osv.dev/vulnerability/AZL-33357 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-49554 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-49554 · Vendor Advisory
• https://redos.red-soft.ru/support/secure · Note
• https://twitter.com/VulmonFeeds/status/1742359642150170926 · Twitter Post
• https://t.me/cvenotify/65988 · Telegram Post
• https://twitter.com/CVEnew/status/1742326528644682159 · Twitter Post