In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by pp_getline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in delete_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Feb 25, 2019 | Jun 29, 2017 |
| Gentoo Linux | — | Upgrade dev-lang/nasm. | Mar 29, 2019 | Jun 29, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Jun 29, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nasm | Jan 20, 2021 | Jun 29, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Jun 29, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 24, 2017 |
| Suse | — | Upgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nssUpgrade libfreebl3Upgrade firefox-libcairo2Upgrade nasmUpgrade mozilla-nss-develUpgrade mozilla-nss-certsUpgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-toolsUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-glib2-toolsUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nss-32bitUpgrade firefox-gtk3-immodule-ximUpgrade libfreebl3-32bitUpgrade firefox-libpango-1_0-0Upgrade libfirefox-glib-2_0-0Upgrade libsoftokn3Upgrade mozilla-nss-certs-32bitUpgrade firefox-libcairo-gobject2Upgrade firefox-atk-langUpgrade firefox-glib2-langUpgrade mozilla-nsprUpgrade MozillaFirefoxUpgrade firefox-libffi4Upgrade firefox-gio-branding-upstreamUpgrade firefox-libgtk-3-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libharfbuzz0Upgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade libfirefox-gobject-2_0-0Upgrade mozilla-nspr-32bitUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nspr-develUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gdk-pixbuf-langUpgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-langUpgrade firefox-libffi7Upgrade firefox-gtk3-immodules-tigrignaUpgrade MozillaFirefox-translations-otherUpgrade libsoftokn3-32bit | Aug 4, 2017 | Jun 29, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Jun 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub