vulnerability

Amazon Linux AMI: CVE-2021-33459: Security patch for yasm (ALAS-2023-1724)

Severity

CVSS

(AV:L/AC:M/Au:N/C:N/I:N/A:C)

Published

Jul 26, 2022

Added

Apr 6, 2023

Modified

May 21, 2025

Description

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in nasm_parser_directive() in modules/parsers/nasm/nasm-parse.c.

amazon-linux-upgrade-yasm

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.