In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade libfirefox-gio-2_0-0Upgrade firefox-glib2-langUpgrade firefox-glib2-toolsUpgrade firefox-gtk3-langUpgrade firefox-gtk3-immodule-amharicUpgrade libfreebl3-32bitUpgrade libfirefox-glib-2_0-0Upgrade mozilla-nss-develUpgrade mozilla-nss-toolsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozillafirefox-translations-otherUpgrade nasmUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libpango-1_0-0Upgrade libfreebl3Upgrade mozilla-nspr-32bitUpgrade mozillafirefoxUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade mozillafirefox-translations-commonUpgrade mozilla-nss-32bitUpgrade libsoftokn3Upgrade mozilla-nss-certsUpgrade mozilla-nss-certs-32bitUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-libharfbuzz0Upgrade firefox-libffi4Upgrade firefox-libgtk-3-0Upgrade libsoftokn3-32bitUpgrade mozilla-nspr-develUpgrade firefox-libcairo2Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nsprUpgrade firefox-libffi7Upgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-immodule-ximUpgrade firefox-libcairo-gobject2Upgrade firefox-gio-branding-upstreamUpgrade mozillafirefox-branding-sledUpgrade firefox-gtk3-immodules-tigrignaUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-toolsUpgrade firefox-gtk3-dataUpgrade firefox-atk-langUpgrade mozilla-nss | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub