In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade firefox-libgtk-3-0Upgrade libfirefox-gthread-2_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-libcairo2Upgrade firefox-gio-branding-upstreamUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-toolsUpgrade firefox-gtk3-immodule-multipressUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodule-ximUpgrade firefox-libcairo-gobject2Upgrade mozillafirefox-branding-sledUpgrade mozilla-nssUpgrade firefox-libffi7Upgrade mozilla-nsprUpgrade libfirefox-gmodule-2_0-0Upgrade libfirefox-gobject-2_0-0Upgrade firefox-libharfbuzz0Upgrade firefox-libffi4Upgrade firefox-atk-langUpgrade mozilla-nspr-develUpgrade firefox-gtk3-dataUpgrade firefox-libpango-1_0-0Upgrade mozillafirefox-translations-commonUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-libatk-1_0-0Upgrade mozillafirefox-translations-otherUpgrade firefox-gtk3-immodule-vietnameseUpgrade libsoftokn3Upgrade mozilla-nss-certs-32bitUpgrade firefox-gtk3-immodule-amharicUpgrade nasmUpgrade libfreebl3Upgrade firefox-gtk3-langUpgrade libfreebl3-32bitUpgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nss-develUpgrade libfirefox-glib-2_0-0Upgrade libfirefox-gio-2_0-0Upgrade mozilla-nss-32bitUpgrade firefox-glib2-langUpgrade mozilla-nss-toolsUpgrade firefox-glib2-toolsUpgrade mozilla-nss-certsUpgrade mozillafirefox | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub