In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade libsoftokn3-32bitUpgrade firefox-gtk3-toolsUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-langUpgrade firefox-gio-branding-upstreamUpgrade libfirefox-gthread-2_0-0Upgrade firefox-atk-langUpgrade mozillafirefox-branding-sledUpgrade mozilla-nss-certs-32bitUpgrade libfreebl3-32bitUpgrade libfirefox-gobject-2_0-0Upgrade libfirefox-gio-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-immodule-ximUpgrade firefox-libffi7Upgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-dataUpgrade firefox-libcairo2Upgrade firefox-glib2-toolsUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-glib-2_0-0Upgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libffi4Upgrade firefox-libcairo-gobject2Upgrade nasmUpgrade mozillafirefoxUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-glib2-langUpgrade firefox-libgtk-3-0Upgrade mozilla-nssUpgrade firefox-gtk3-immodule-multipressUpgrade libfirefox-gmodule-2_0-0Upgrade mozillafirefox-translations-commonUpgrade mozilla-nspr-develUpgrade mozilla-nsprUpgrade mozillafirefox-translations-otherUpgrade mozilla-nspr-32bitUpgrade libsoftokn3Upgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nss-certsUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libharfbuzz0Upgrade libfreebl3Upgrade mozilla-nss-toolsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nss-develUpgrade mozilla-nss-32bit | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub