CVE-2023-31975 - Vulnerability Details

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact partial

Vendors	Products
Yasm Project	Yasm

Configuration 1 [-]

cpe:2.3:a:yasm_project:yasm:1.3.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://www.openwall.com/lists/oss-security/2023/06/20/6
http://www.openwall.com/lists/oss-security/2023/06/21/10
http://www.openwall.com/lists/oss-security/2023/06/21/13
http://www.openwall.com/lists/oss-security/2023/06/21/2
http://www.openwall.com/lists/oss-security/2023/06/21/5
http://www.openwall.com/lists/oss-security/2023/06/21/7
http://www.openwall.com/lists/oss-security/2023/06/21/8
http://www.openwall.com/lists/oss-security/2023/06/21/9
http://www.openwall.com/lists/oss-security/2023/06/22/1
http://www.openwall.com/lists/oss-security/2023/06/22/3
http://www.openwall.com/lists/oss-security/2023/06/22/6
http://www.openwall.com/lists/oss-security/2023/06/23/1
http://www.openwall.com/lists/oss-security/2023/06/23/2
http://www.openwall.com/lists/oss-security/2023/06/23/4
http://www.openwall.com/lists/oss-security/2023/06/23/8
http://www.openwall.com/lists/oss-security/2023/06/23/9
http://www.openwall.com/lists/oss-security/2023/06/24/1
https://github.com/yasm/yasm/issues/210

History

Wed, 29 Jan 2025 19:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-05-09T00:00:00.000Z

Updated: 2025-01-29T18:28:03.588Z

Reserved: 2023-04-29T00:00:00.000Z

Link: CVE-2023-31975

Vulnrichment

Updated: 2024-08-02T15:03:28.703Z

NVD

Status : Modified

Published: 2023-05-09T13:15:18.590

Modified: 2025-01-29T19:15:17.950

Link: CVE-2023-31975

Redhat

No data.

Show plain JSON

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-31975", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-01-29T18:28:03.588Z", "dateReserved": "2023-04-29T00:00:00.000Z", "datePublished": "2023-05-09T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-05-16T21:41:28.172Z"}, "descriptions": [{"lang": "en", "value": "yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy."}], "tags": ["disputed"], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/yasm/yasm/issues/210"}, {"name": "[oss-security] 20230620 CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/20/6"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/2"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/7"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/10"}, {"name": "[oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/5"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/8"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/9"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/13"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/1"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/3"}, {"name": "[oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/6"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/2"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/1"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/4"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/8"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/9"}, {"name": "[oss-security] 20230624 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/24/1"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T15:03:28.703Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/yasm/yasm/issues/210", "tags": ["x_transferred"]}, {"name": "[oss-security] 20230620 CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/20/6"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/2"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/7"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/10"}, {"name": "[oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/5"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/8"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/9"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/13"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/1"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/3"}, {"name": "[oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/6"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/2"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/1"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/4"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/8"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/9"}, {"name": "[oss-security] 20230624 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/24/1"}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-401", "lang": "en", "description": "CWE-401 Missing Release of Memory after Effective Lifetime"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-01-29T18:25:29.327733Z", "id": "CVE-2023-31975", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-29T18:28:03.588Z"}}]}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2023-31975 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

dateUpdated : 2025-01-29T18:28:03.588Z (string)

dateReserved : 2023-04-29T00:00:00.000Z (string)

datePublished : 2023-05-09T00:00:00.000Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2024-05-16T21:41:28.172Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy. (string)

}

]

tags : [ »

0 : disputed (string)

]

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

version : n/a (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://github.com/yasm/yasm/issues/210 (string)

}

1 : { »

name : [oss-security] 20230620 CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/20/6 (string)

}

2 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/2 (string)

}

3 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/7 (string)

}

4 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/10 (string)

}

5 : { »

name : [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/5 (string)

}

6 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/8 (string)

}

7 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/9 (string)

}

8 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/13 (string)

}

9 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/1 (string)

}

10 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/3 (string)

}

11 : { »

name : [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/6 (string)

}

12 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/2 (string)

}

13 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/1 (string)

}

14 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/4 (string)

}

15 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/8 (string)

}

16 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/9 (string)

}

17 : { »

name : [oss-security] 20230624 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/24/1 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : n/a (string)

}

]

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T15:03:28.703Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://github.com/yasm/yasm/issues/210 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

name : [oss-security] 20230620 CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/20/6 (string)

}

2 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/2 (string)

}

3 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/7 (string)

}

4 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/10 (string)

}

5 : { »

name : [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/5 (string)

}

6 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/8 (string)

}

7 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/9 (string)

}

8 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/13 (string)

}

9 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/1 (string)

}

10 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/3 (string)

}

11 : { »

name : [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/6 (string)

}

12 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/2 (string)

}

13 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/1 (string)

}

14 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/4 (string)

}

15 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/8 (string)

}

16 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/9 (string)

}

17 : { »

name : [oss-security] 20230624 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/24/1 (string)

}

]

}

1 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-401 (string)

lang : en (string)

description : CWE-401 Missing Release of Memory after Effective Lifetime (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 3.3 (number)

attackVector : LOCAL (string)

baseSeverity : LOW (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L (string)

integrityImpact : NONE (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : LOW (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-01-29T18:25:29.327733Z (string)

id : CVE-2023-31975 (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-01-29T18:28:03.588Z (string)

}

]

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-31975", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-01-29T18:28:03.588Z", "dateReserved": "2023-04-29T00:00:00.000Z", "datePublished": "2023-05-09T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-05-16T21:41:28.172Z"}, "descriptions": [{"lang": "en", "value": "yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy."}], "tags": ["disputed"], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/yasm/yasm/issues/210"}, {"name": "[oss-security] 20230620 CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/20/6"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/2"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/7"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/10"}, {"name": "[oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/5"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/8"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/9"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/13"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/1"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/3"}, {"name": "[oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/6"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/2"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/1"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/4"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/8"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/9"}, {"name": "[oss-security] 20230624 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/06/24/1"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T15:03:28.703Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/yasm/yasm/issues/210", "tags": ["x_transferred"]}, {"name": "[oss-security] 20230620 CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/20/6"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/2"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/7"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/10"}, {"name": "[oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/5"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/8"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/9"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/13"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/1"}, {"name": "[oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/3"}, {"name": "[oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/6"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/2"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/1"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/4"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/8"}, {"name": "[oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/9"}, {"name": "[oss-security] 20230624 Re: CVE-2023-31975: memory leak in yasm", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/06/24/1"}]}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-31975", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-01-29T18:25:29.327733Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-401", "description": "CWE-401 Missing Release of Memory after Effective Lifetime"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-29T18:27:57.249Z"}}]}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2023-31975 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

dateUpdated : 2025-01-29T18:28:03.588Z (string)

dateReserved : 2023-04-29T00:00:00.000Z (string)

datePublished : 2023-05-09T00:00:00.000Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2024-05-16T21:41:28.172Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

}

]

tags : [ »

0 : disputed (string)

]

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

version : n/a (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://github.com/yasm/yasm/issues/210 (string)

}

1 : { »

name : [oss-security] 20230620 CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/20/6 (string)

}

2 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/2 (string)

}

3 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/7 (string)

}

4 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/10 (string)

}

5 : { »

name : [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/5 (string)

}

6 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/8 (string)

}

7 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/9 (string)

}

8 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/13 (string)

}

9 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/1 (string)

}

10 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/3 (string)

}

11 : { »

name : [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/6 (string)

}

12 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/2 (string)

}

13 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/1 (string)

}

14 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/4 (string)

}

15 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/8 (string)

}

16 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/9 (string)

}

17 : { »

name : [oss-security] 20230624 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/24/1 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : n/a (string)

}

]

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T15:03:28.703Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://github.com/yasm/yasm/issues/210 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

name : [oss-security] 20230620 CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/20/6 (string)

}

2 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/2 (string)

}

3 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/7 (string)

}

4 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/10 (string)

}

5 : { »

name : [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/5 (string)

}

6 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/8 (string)

}

7 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/9 (string)

}

8 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/13 (string)

}

9 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/1 (string)

}

10 : { »

name : [oss-security] 20230621 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/3 (string)

}

11 : { »

name : [oss-security] 20230622 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/6 (string)

}

12 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/2 (string)

}

13 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/1 (string)

}

14 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/4 (string)

}

15 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/8 (string)

}

16 : { »

name : [oss-security] 20230623 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/9 (string)

}

17 : { »

name : [oss-security] 20230624 Re: CVE-2023-31975: memory leak in yasm (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/24/1 (string)

}

]

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 3.3 (number)

attackVector : LOCAL (string)

baseSeverity : LOW (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L (string)

integrityImpact : NONE (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : LOW (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-31975 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-01-29T18:25:29.327733Z (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-401 (string)

description : CWE-401 Missing Release of Memory after Effective Lifetime (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-01-29T18:27:57.249Z (string)

}

]

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:yasm_project:yasm:1.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "AD6556F7-3880-452A-ABA9-1A8A14BA41F3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [{"sourceIdentifier": "cve@mitre.org", "tags": ["disputed"]}], "descriptions": [{"lang": "en", "value": "yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy."}], "id": "CVE-2023-31975", "lastModified": "2025-01-29T19:15:17.950", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2023-05-09T13:15:18.590", "references": [{"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/20/6"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/10"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/13"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/2"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/5"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/7"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/8"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/9"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/1"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/3"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/6"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/1"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/2"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/4"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/8"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/9"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/24/1"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Issue Tracking"], "url": "https://github.com/yasm/yasm/issues/210"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/20/6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/10"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/13"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/5"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/7"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/21/9"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/22/6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/4"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/23/9"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/06/24/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking"], "url": "https://github.com/yasm/yasm/issues/210"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-401"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-401"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:yasm_project:yasm:1.3.0:*:*:*:*:*:*:* (string)

matchCriteriaId : AD6556F7-3880-452A-ABA9-1A8A14BA41F3 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ »

0 : { »

sourceIdentifier : cve@mitre.org (string)

tags : [ »

0 : disputed (string)

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

}

]

id : CVE-2023-31975 (string)

lastModified : 2025-01-29T19:15:17.950 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : LOW (string)

baseScore : 3.3 (number)

baseSeverity : LOW (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 1.4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : LOW (string)

baseScore : 3.3 (number)

baseSeverity : LOW (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 1.4 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2023-05-09T13:15:18.590 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/20/6 (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/10 (string)

}

2 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/13 (string)

}

3 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/2 (string)

}

4 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/5 (string)

}

5 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/7 (string)

}

6 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/8 (string)

}

7 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/9 (string)

}

8 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/1 (string)

}

9 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/3 (string)

}

10 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/6 (string)

}

11 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/1 (string)

}

12 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/2 (string)

}

13 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/4 (string)

}

14 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/8 (string)

}

15 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/9 (string)

}

16 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/24/1 (string)

}

17 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Exploit (string)

1 : Issue Tracking (string)

]

url : https://github.com/yasm/yasm/issues/210 (string)

}

18 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/20/6 (string)

}

19 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/10 (string)

}

20 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/13 (string)

}

21 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/2 (string)

}

22 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/5 (string)

}

23 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/7 (string)

}

24 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/8 (string)

}

25 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/21/9 (string)

}

26 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/1 (string)

}

27 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/3 (string)

}

28 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/22/6 (string)

}

29 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/1 (string)

}

30 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/2 (string)

}

31 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/4 (string)

}

32 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/8 (string)

}

33 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/23/9 (string)

}

34 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/06/24/1 (string)

}

35 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Issue Tracking (string)

]

url : https://github.com/yasm/yasm/issues/210 (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-401 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-401 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction Required

Exploitation poc

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object