In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade firefox-libcairo2Upgrade firefox-libffi7Upgrade firefox-gtk3-dataUpgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade libsoftokn3-32bitUpgrade libfirefox-gobject-2_0-0Upgrade libfreebl3-32bitUpgrade firefox-gtk3-toolsUpgrade nasmUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gdk-pixbuf-langUpgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-langUpgrade firefox-libffi4Upgrade libfirefox-gthread-2_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade mozilla-nss-certs-32bitUpgrade firefox-gio-branding-upstreamUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfirefox-gio-2_0-0Upgrade firefox-atk-langUpgrade firefox-gtk3-immodule-ximUpgrade firefox-glib2-toolsUpgrade firefox-libatk-1_0-0Upgrade libfirefox-glib-2_0-0Upgrade mozilla-nss-develUpgrade libfreebl3Upgrade mozilla-nssUpgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nss-certsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-libgtk-3-0Upgrade MozillaFirefox-branding-SLEDUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-inuktitutUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-toolsUpgrade firefox-glib2-langUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nss-32bitUpgrade MozillaFirefoxUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nsprUpgrade libsoftokn3Upgrade mozilla-nspr-32bitUpgrade mozilla-nspr-devel | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub