CVE-2023-30402

Public on 2023-04-25
Modified on 2024-01-20
Description
YASM v1.3.0 was discovered to contain a heap overflow via the function handle_dot_label at /nasm/nasm-token.re.
Severity
Low severity
Low
CVSS v3 Base Score
2.8
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 1 yasm Pending Fix
Amazon Linux 2 - Graphicsmagick1.3 Extra yasm Pending Fix
Amazon Linux 2023 yasm Not Affected

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 2.8 CVSS 3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
NVD CVSSv3 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H