Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2021-33468
CVE-2021-33468:
NixOS vulnerability analysis and mitigation
Overview
An issue was discovered in YASM version 1.3.0. There is a use-after-free vulnerability in the error() function in modules/preprocs/nasm/nasm-pp.c (Debian Tracker, AttackerKB).
Technical details
The vulnerability is a use-after-free condition that occurs in the error() function located in modules/preprocs/nasm/nasm-pp.c at line 4830. The issue involves accessing memory after it has been freed, which can lead to program crashes or potential exploitation. The vulnerability requires local access and user interaction to be exploited (AttackerKB).
Impact
The vulnerability can result in denial of service conditions when exploited. Since it requires local access and user interaction, the impact is somewhat limited but could affect system stability when processing malformed input (AttackerKB).
Mitigation and workarounds
The vulnerability affects YASM version 1.3.0. Multiple Linux distributions have marked this as vulnerable, including Debian's bullseye, bookworm, trixie, and sid releases (Debian Tracker).
Additional resources
Source: This report was generated using AI
Related NixOS vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management