CVE-2023-31723
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function...
CVE-2023-31723 is a medium vulnerability (CVSS 5.5) in Yasm Project Yasm, published May 17, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. No source names a fixed version.
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.
- Record
CVE-2023-31723- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
CVE List
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.
- Record
CVE-2023-31723- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
EUVDEUVD-2023-36014
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.
- Record
EUVD-2023-36014- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5pcc-9vqw-qq2v
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function...
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.
- Record
GHSA-5pcc-9vqw-qq2v- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-26739
CVE-2023-31723 affecting package yasm 1.3.0-17
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.
- Record
AZL-26739- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-35390
CVE-2023-31723 affecting package yasm 1.3.0-17
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.
- Record
AZL-35390- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.
- Record
CVE-2023-31723- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-31723
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.
- Record
DEBIAN-CVE-2023-31723- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-31723
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.
- Record
UBUNTU-CVE-2023-31723- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
yasmAzure Linux:2 |
through 1.3.0-17 | None known |
yasmAzure Linux:3 |
through 1.3.0-17 | None known |
yasmDebian:12 |
All versions, plus listed versions 1.3.0-41.3.0-51.3.0-61.3.0-71.3.0-8 |
None known |
yasmDebian:13 |
All versions, plus listed versions 1.3.0-71.3.0-8 |
None known |
yasmDebian:14 |
All versions, plus listed versions 1.3.0-71.3.0-8 |
None known |
yasmUbuntu:16.04:LTS |
All versions, plus listed versions 1.3.0-2 |
None known |
yasmUbuntu:18.04:LTS |
All versions, plus listed versions 1.3.0-21.3.0-2build1 |
None known |
yasmUbuntu:20.04:LTS |
All versions, plus listed versions 1.3.0-2build11.3.0-2ubuntu1 |
None known |
yasmUbuntu:22.04:LTS |
All versions, plus listed versions 1.3.0-2.1 |
None known |
yasmUbuntu:24.04:LTS |
All versions, plus listed versions 1.3.0-4 |
None known |
yasmUbuntu:25.10 |
All versions, plus listed versions 1.3.0-51.3.0-7 |
None known |
yasmUbuntu:26.10 |
All versions, plus listed versions 1.3.0-8 |
None known |
yasmUbuntu:26.04:LTS |
All versions, plus listed versions 1.3.0-71.3.0-8 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/yasm/yasm/issues/220
nvd.nist.gov/vuln/detail/CVE-2023-31723
security-tracker.debian.org/tracker/CVE-2023-31723
ubuntu.com/security/CVE-2023-31723
cve.org/CVERecord?id=CVE-2023-31723