In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade libsoftokn3Upgrade mozilla-nss-certs-32bitUpgrade MozillaFirefox-translations-otherUpgrade firefox-libpango-1_0-0Upgrade mozilla-nss-toolsUpgrade MozillaFirefoxUpgrade firefox-glib2-toolsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfreebl3-32bitUpgrade firefox-gtk3-langUpgrade mozilla-nss-develUpgrade libfreebl3Upgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gtk3-immodule-amharicUpgrade nasmUpgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nss-32bitUpgrade mozilla-nss-certsUpgrade firefox-libatk-1_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfirefox-gio-2_0-0Upgrade firefox-glib2-langUpgrade firefox-gtk3-immodule-inuktitutUpgrade libfirefox-glib-2_0-0Upgrade firefox-gio-branding-upstreamUpgrade firefox-libgtk-3-0Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-libffi7Upgrade MozillaFirefox-branding-SLEDUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-translations-commonUpgrade firefox-libharfbuzz0Upgrade mozilla-nssUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-atk-langUpgrade firefox-gdk-pixbuf-langUpgrade firefox-libffi4Upgrade firefox-gtk3-immodule-ximUpgrade firefox-libcairo-gobject2Upgrade firefox-libcairo2Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nsprUpgrade firefox-gtk3-toolsUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nspr-develUpgrade libfirefox-gobject-2_0-0 | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub