yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code.
References
Configurations
History
21 Nov 2024, 07:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2189601#c3 - | |
| References | () https://github.com/yasm/yasm/issues/217 - Exploit, Issue Tracking | |
| References | () https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr1/readme.md - Exploit |
14 May 2024, 12:55
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| Summary | (en) yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code. |
05 May 2023, 18:04
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
03 May 2023, 14:29
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:yasm_project:yasm:1.3.0.55.g101bc:*:*:*:*:*:*:* | |
| References | (MISC) https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr1/readme.md - Exploit | |
| References | (MISC) https://github.com/yasm/yasm/issues/217 - Exploit, Issue Tracking | |
| CWE | CWE-787 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
24 Apr 2023, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-24 13:15
Updated : 2024-11-21 07:57
NVD link : CVE-2023-29582
Mitre link : CVE-2023-29582
CVE.ORG link : CVE-2023-29582
JSON object : View
Products Affected
yasm_project
- yasm
CWE
CWE-787
Out-of-bounds Write