In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Sep 9, 2017 |
| Gentoo Linux | — | Upgrade dev-lang/nasm. | Mar 29, 2019 | Sep 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade nasm | Dec 4, 2017 | Sep 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Dec 4, 2017 | Sep 9, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 28, 2017 |
| Suse | — | Upgrade mozilla-nspr-32bitUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-libatk-1_0-0Upgrade mozilla-nspr-develUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-immodule-amharicUpgrade nasmUpgrade mozilla-nss-develUpgrade firefox-gtk3-dataUpgrade libfreebl3-32bitUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libffi4Upgrade MozillaFirefoxUpgrade firefox-gdk-pixbuf-langUpgrade mozilla-nss-32bitUpgrade mozilla-nss-certs-32bitUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-toolsUpgrade firefox-gtk3-branding-upstreamUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-atk-langUpgrade firefox-libffi7Upgrade libfreebl3Upgrade MozillaFirefox-translations-otherUpgrade firefox-libcairo2Upgrade firefox-libgtk-3-0Upgrade firefox-glib2-toolsUpgrade mozilla-nss-certsUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-immodule-ximUpgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nssUpgrade firefox-libcairo-gobject2Upgrade libfirefox-gio-2_0-0Upgrade libfirefox-glib-2_0-0Upgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-thaiUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-langUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozilla-nsprUpgrade libsoftokn3Upgrade firefox-glib2-langUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodule-vietnamese | Dec 12, 2019 | Sep 9, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Sep 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub