In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nasm | Jan 20, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade firefox-gtk3-immodule-ximUpgrade libfirefox-gthread-2_0-0Upgrade MozillaFirefox-translations-commonUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nsprUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-libcairo-gobject2Upgrade firefox-libharfbuzz0Upgrade firefox-gtk3-dataUpgrade firefox-gtk3-langUpgrade firefox-atk-langUpgrade MozillaFirefox-branding-SLEDUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gdk-pixbuf-langUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nspr-develUpgrade firefox-libgtk-3-0Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-immodule-thaiUpgrade libfirefox-gobject-2_0-0Upgrade mozilla-nssUpgrade firefox-glib2-langUpgrade firefox-libffi4Upgrade firefox-libffi7Upgrade firefox-gtk3-immodule-inuktitutUpgrade libfirefox-gio-2_0-0Upgrade libfreebl3Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfirefox-glib-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade firefox-libcairo2Upgrade mozilla-nss-toolsUpgrade nasmUpgrade mozilla-nss-develUpgrade mozilla-nss-32bitUpgrade MozillaFirefoxUpgrade firefox-glib2-toolsUpgrade libfreebl3-32bitUpgrade mozilla-nspr-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libsoftokn3Upgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-toolsUpgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nss-certs | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub