In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Sep 9, 2017 |
| Gentoo Linux | — | Upgrade dev-lang/nasm. | Mar 29, 2019 | Sep 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade nasm | Dec 4, 2017 | Sep 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Dec 4, 2017 | Sep 9, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 28, 2017 |
| Suse | — | Upgrade firefox-glib2-langUpgrade firefox-libharfbuzz0Upgrade MozillaFirefoxUpgrade mozilla-nss-develUpgrade mozilla-nspr-32bitUpgrade firefox-libffi4Upgrade firefox-gtk3-immodule-multipressUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-translations-commonUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nsprUpgrade mozilla-nspr-develUpgrade mozilla-nss-toolsUpgrade libfreebl3-32bitUpgrade libsoftokn3Upgrade firefox-gtk3-immodule-thaiUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libatk-1_0-0Upgrade nasmUpgrade firefox-gtk3-langUpgrade firefox-gtk3-dataUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nss-certsUpgrade firefox-gio-branding-upstreamUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-atk-langUpgrade mozilla-nss-certs-32bitUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-libgtk-3-0Upgrade mozilla-nssUpgrade firefox-libcairo2Upgrade firefox-libffi7Upgrade firefox-libcairo-gobject2Upgrade firefox-libpango-1_0-0Upgrade mozilla-nss-32bitUpgrade libfirefox-glib-2_0-0Upgrade firefox-gtk3-toolsUpgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-immodule-ximUpgrade MozillaFirefox-translations-otherUpgrade libfreebl3Upgrade firefox-gdk-pixbuf-langUpgrade firefox-glib2-toolsUpgrade libfirefox-gmodule-2_0-0Upgrade libfirefox-gobject-2_0-0 | Dec 12, 2019 | Sep 9, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Sep 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub