CVE-2023-29583

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-29583
yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/yasm/yasm/issues/218 Exploit Issue Tracking
https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr5/readme.md Exploit
https://github.com/yasm/yasm/issues/218 Exploit Issue Tracking
https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr5/readme.md Exploit
Configurations

Configuration 1 (hide)

cpe:2.3:a:yasm_project:yasm:1.3.0.55.g101bc:*:*:*:*:*:*:*
History

21 Nov 2024, 07:57

Type Values Removed Values Added
References () https://github.com/yasm/yasm/issues/218 - Exploit, Issue Tracking () https://github.com/yasm/yasm/issues/218 - Exploit, Issue Tracking
References () https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr5/readme.md - Exploit () https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr5/readme.md - Exploit

01 Aug 2024, 13:43

Type Values Removed Values Added
CWE CWE-121

14 May 2024, 12:55

Type Values Removed Values Added
Summary (en) yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. (en) yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code.

05 May 2023, 18:04

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.8 		v2 : unknown
v3 : 5.5

03 May 2023, 13:10

Type Values Removed Values Added
CWE CWE-787
References (MISC) https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr5/readme.md - (MISC) https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr5/readme.md - Exploit
References (MISC) https://github.com/yasm/yasm/issues/218 - (MISC) https://github.com/yasm/yasm/issues/218 - Exploit, Issue Tracking
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CPE cpe:2.3:a:yasm_project:yasm:1.3.0.55.g101bc:*:*:*:*:*:*:*

24 Apr 2023, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-04-24 13:15

Updated : 2024-11-21 07:57

NVD link : CVE-2023-29583

Mitre link : CVE-2023-29583

CVE.ORG link : CVE-2023-29583

JSON object : View

Products Affected

yasm_project

  • yasm
CWE
CWE-787

Out-of-bounds Write

CWE-121

Stack-based Buffer Overflow