Debian Yasm vulnerabilities
3 known vulnerabilities affecting debian/yasm.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM2LOW1
Vulnerabilities
Page 1 of 1
CVE-2023-29579P4MEDIUMCVSS 5.5fixed in yasm 1.3.0-7 (forky)2023
CVE-2023-29579 [MEDIUM] CVE-2023-29579: yasm - yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the componen...
yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 1.3.0-7)
sid: reso
debian
CVE-2021-33464P4MEDIUMCVSS 5.5fixed in yasm 1.3.0-7 (forky)2021
CVE-2021-33464 [MEDIUM] CVE-2021-33464: yasm - An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow i...
An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in inc_fopen() in modules/preprocs/nasm/nasm-pp.c.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 1.3.0-7)
sid: resolved (fixed in 1.3.0-7)
trixie: resolved (fixed in 1.3.0-7)
debian
CVE-2021-33456P4LOWCVSS 5.5fixed in yasm 1.3.0-8 (forky)2021
CVE-2021-33456 [MEDIUM] CVE-2021-33456: yasm - An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereferen...
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in hash() in modules/preprocs/nasm/nasm-pp.c.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 1.3.0-8)
sid: resolved (fixed in 1.3.0-8)
trixie: open
debian