Skip to content
OpenAdvisories
Medium ALAS2023-2023-275 1 CVE

Moderate: yasm security update (Amazon Linux 2023)

Published Aug 3, 2023 · Updated Aug 9, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-37732: Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2023 yasm 0:1.3.0-13.amzn2023.0.4
Amazon Linux · 2023 yasm-debuginfo 0:1.3.0-13.amzn2023.0.4
Amazon Linux · 2023 yasm-debugsource 0:1.3.0-13.amzn2023.0.4
Amazon Linux · 2023 yasm-devel 0:1.3.0-13.amzn2023.0.4

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-37732.html