CVE-2023-51258: 
NixOS vulnerability analysis and mitigation

A memory leak vulnerability (CVE-2023-51258) was discovered in YASM version 1.3.0. The vulnerability affects the new_Token function in the modules/preprocs/nasm/nasm-pp:1512 component. This security issue was disclosed and added to the National Vulnerability Database on January 18, 2024 (NVD).

The vulnerability is classified with a CVSS v3.1 base score of 5.5 (Medium severity) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The issue is categorized as CWE-401 (Missing Release of Memory after Effective Lifetime). The memory leak occurs specifically in the new_Token function where memory is allocated but not properly released after its effective lifetime (NVD, GitHub POC).

The vulnerability allows a local attacker to cause a denial of service condition through memory resource exhaustion. When exploited, the application fails to release allocated memory, leading to gradual consumption of system resources (NVD).

The vulnerability affects YASM version 1.3.0, and users should monitor for updates from the vendor. As of the current data, no official patch has been released to address this specific vulnerability (NVD).