In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nasm | Jan 20, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade firefox-gtk3-immodule-thaiUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libffi7Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-libgtk-3-0Upgrade firefox-libcairo-gobject2Upgrade firefox-libffi4Upgrade mozilla-nssUpgrade mozilla-nspr-develUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-libharfbuzz0Upgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-immodule-amharicUpgrade MozillaFirefox-translations-commonUpgrade firefox-atk-langUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-langUpgrade libfirefox-gthread-2_0-0Upgrade firefox-glib2-langUpgrade MozillaFirefox-translations-otherUpgrade libfirefox-gobject-2_0-0Upgrade libsoftokn3-32bitUpgrade firefox-gtk3-dataUpgrade mozilla-nsprUpgrade mozilla-nss-toolsUpgrade firefox-libcairo2Upgrade nasmUpgrade mozilla-nss-develUpgrade libfreebl3Upgrade mozilla-nspr-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfreebl3-32bitUpgrade firefox-libatk-1_0-0Upgrade firefox-glib2-toolsUpgrade mozilla-nss-32bitUpgrade MozillaFirefoxUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfirefox-glib-2_0-0Upgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nss-certs-32bitUpgrade firefox-libpango-1_0-0Upgrade mozilla-nss-certsUpgrade libsoftokn3Upgrade firefox-gtk3-tools | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub