Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-31975
HistoryMay 09, 2023 - 12:00 a.m.

CVE-2023-31975

2023-05-0900:00:00
ubuntu.com
ubuntu.com
11
memory leak
yasm v1.3.0
yasm_intnum_copy
unix

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

3.9

Confidence

High

EPSS

0.001

Percentile

31.6%

DISPUTED yasm v1.3.0 was discovered to contain a memory leak via the
function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third
parties dispute this as a bug and not a vulnerability according to the YASM
security policy.

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

3.9

Confidence

High

EPSS

0.001

Percentile

31.6%