In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Sep 9, 2017 |
| Gentoo Linux | — | Upgrade dev-lang/nasm. | Mar 29, 2019 | Sep 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade nasm | Dec 4, 2017 | Sep 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Dec 4, 2017 | Sep 9, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 28, 2017 |
| Suse | — | Upgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nsprUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libffi4Upgrade firefox-gtk3-immodule-vietnameseUpgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-immodule-multipressUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade nasmUpgrade MozillaFirefoxUpgrade mozilla-nss-develUpgrade libfreebl3-32bitUpgrade mozilla-nspr-32bitUpgrade firefox-atk-langUpgrade mozilla-nss-certsUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gdk-pixbuf-langUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-toolsUpgrade firefox-libgtk-3-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-certs-32bitUpgrade firefox-glib2-toolsUpgrade firefox-gio-branding-upstreamUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-libcairo2Upgrade mozilla-nssUpgrade firefox-libffi7Upgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-immodule-ximUpgrade libfreebl3Upgrade mozilla-nss-32bitUpgrade libfirefox-gio-2_0-0Upgrade libfirefox-glib-2_0-0Upgrade firefox-libpango-1_0-0Upgrade mozilla-nspr-develUpgrade firefox-glib2-langUpgrade firefox-libatk-1_0-0Upgrade libsoftokn3Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodule-thaiUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfirefox-gthread-2_0-0Upgrade firefox-libharfbuzz0Upgrade firefox-gtk3-lang | Dec 12, 2019 | Sep 9, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Sep 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub