In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Feb 25, 2019 | Jul 8, 2017 |
| Gentoo Linux | — | Upgrade dev-lang/nasm. | Mar 29, 2019 | Jul 8, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Jul 8, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nasm | Jan 20, 2021 | Jul 8, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Jul 8, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 24, 2017 |
| Suse | — | Upgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade MozillaFirefoxUpgrade libfirefox-gthread-2_0-0Upgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-libpango-1_0-0Upgrade mozilla-nspr-develUpgrade libsoftokn3Upgrade firefox-gtk3-dataUpgrade mozilla-nss-toolsUpgrade firefox-glib2-langUpgrade firefox-libharfbuzz0Upgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-32bitUpgrade firefox-libcairo2Upgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-immodules-tigrignaUpgrade libfreebl3-32bitUpgrade firefox-gtk3-langUpgrade mozilla-nss-develUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-libffi4Upgrade libfirefox-glib-2_0-0Upgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-toolsUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gio-branding-upstreamUpgrade firefox-libgtk-3-0Upgrade firefox-libcairo-gobject2Upgrade mozilla-nssUpgrade firefox-atk-langUpgrade mozilla-nsprUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-gobject-2_0-0Upgrade firefox-glib2-toolsUpgrade mozilla-nss-certs-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-libffi7Upgrade libfreebl3Upgrade mozilla-nss-certsUpgrade firefox-gtk3-immodule-ximUpgrade nasmUpgrade MozillaFirefox-translations-common | Aug 4, 2017 | Jul 8, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Jul 8, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub