CVE-2023-51258 — Missing Release of Memory after Effective Lifetime in Yasm

CWE-401 — Missing Release of Memory after Effective Lifetime5 documents5 sources

Severity

5.5MEDIUMNVD

EPSS

0.0%

top 90.57%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Tortall Yasm Debian Yasm Msrc Azl3 Yasm 1.3.0-16 ON Azure Linux 3.0 +1 more

Timeline

PublishedJan 18

Description

A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new_Token function in the modules/preprocs/nasm/nasm-pp:1512.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶debiandebian/yasm

▶NVDtortall/yasm1.3.0

▶msrcmsrc/azl3_yasm_1.3.0-16_on_azure_linux_3.0

▶msrcmsrc/cbl2_yasm_1.3.0-16_on_cbl_mariner_2.0

🔴Vulnerability Details

GHSA

GHSA-8wwj-vq54-xqww: A memory leak issue discovered in YASM v↗2024-01-18

▶

OSV

CVE-2023-51258: A memory leak issue discovered in YASM v↗2024-01-18

▶

📋Vendor Advisories

Microsoft

A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new_Token function in the modules/preprocs/nasm/nasm-pp:1512.↗2024-01-09

▶

Debian

CVE-2023-51258: yasm - A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause ...↗2023

▶