Wind River Support Network

HomeDefectsLIN1022-4113

Acknowledged

LIN1022-4113 : Security Advisory - yasm - CVE-2023-30402

Created: Apr 25, 2023 Updated: May 4, 2023

Found In Version: 10.22.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

YASM v1.3.0 was discovered to contain a heap overflow via the function handle_dot_label at /nasm/nasm-token.re.

CREATE(Triage):(User=admin) CVE-2023-30402 (https://nvd.nist.gov/vuln/detail/CVE-2023-30402)