In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade libfreebl3Upgrade firefox-gtk3-langUpgrade mozilla-nss-32bitUpgrade nasmUpgrade mozilla-nss-certsUpgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfirefox-gio-2_0-0Upgrade firefox-glib2-langUpgrade mozilla-nss-toolsUpgrade firefox-glib2-toolsUpgrade mozilla-nss-develUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-libatk-1_0-0Upgrade mozilla-nspr-32bitUpgrade libfirefox-glib-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade MozillaFirefoxUpgrade libfreebl3-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade MozillaFirefox-translations-otherUpgrade libsoftokn3Upgrade firefox-libgtk-3-0Upgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gdk-pixbuf-langUpgrade MozillaFirefox-translations-commonUpgrade firefox-libcairo-gobject2Upgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-toolsUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-atk-langUpgrade libfirefox-gobject-2_0-0Upgrade firefox-libffi7Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nssUpgrade firefox-libcairo2Upgrade mozilla-nspr-develUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-libffi4Upgrade libsoftokn3-32bitUpgrade mozilla-nspr | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub