In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nss-32bitUpgrade mozilla-nss-develUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libgtk-3-0Upgrade mozillafirefox-translations-otherUpgrade firefox-gtk3-immodule-thaiUpgrade mozillafirefox-translations-commonUpgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nss-certsUpgrade mozilla-nsprUpgrade mozilla-nssUpgrade mozilla-nss-toolsUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-inuktitutUpgrade libfreebl3Upgrade libsoftokn3Upgrade mozilla-nspr-32bitUpgrade firefox-glib2-langUpgrade mozilla-nspr-develUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfirefox-glib-2_0-0Upgrade firefox-libcairo-gobject2Upgrade libfirefox-gobject-2_0-0Upgrade firefox-libffi7Upgrade firefox-libffi4Upgrade firefox-atk-langUpgrade mozillafirefox-branding-sledUpgrade firefox-gio-branding-upstreamUpgrade mozilla-nss-certs-32bitUpgrade firefox-glib2-toolsUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-immodule-amharicUpgrade libfirefox-gio-2_0-0Upgrade mozillafirefoxUpgrade nasmUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-langUpgrade firefox-gtk3-toolsUpgrade libfirefox-gthread-2_0-0Upgrade libfreebl3-32bitUpgrade libsoftokn3-32bitUpgrade firefox-libpango-1_0-0Upgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libatk-1_0-0Upgrade firefox-libcairo2Upgrade firefox-gtk3-data | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub