yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code.
References
| Link | Resource |
|---|---|
| https://github.com/yasm/yasm/issues/218 | Exploit Issue Tracking |
| https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr5/readme.md | Exploit |
| https://github.com/yasm/yasm/issues/218 | Exploit Issue Tracking |
| https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr5/readme.md | Exploit |
Configurations
History
21 Nov 2024, 07:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/yasm/yasm/issues/218 - Exploit, Issue Tracking | |
| References | () https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr5/readme.md - Exploit |
01 Aug 2024, 13:43
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-121 |
14 May 2024, 12:55
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code. |
Information
Published : 2023-04-24 13:15
Updated : 2024-11-21 07:57
NVD link : CVE-2023-29583
Mitre link : CVE-2023-29583
CVE.ORG link : CVE-2023-29583
JSON object : View
Products Affected
yasm_project
- yasm