In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade firefox-gtk3-immodule-ximUpgrade libfirefox-gobject-2_0-0Upgrade firefox-atk-langUpgrade mozilla-nss-certs-32bitUpgrade firefox-gdk-pixbuf-langUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-glib-2_0-0Upgrade firefox-gio-branding-upstreamUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libffi4Upgrade firefox-gtk3-langUpgrade firefox-gtk3-dataUpgrade libfirefox-gio-2_0-0Upgrade firefox-libffi7Upgrade firefox-libatk-1_0-0Upgrade firefox-glib2-toolsUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libcairo2Upgrade libfreebl3-32bitUpgrade nasmUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-toolsUpgrade firefox-libcairo-gobject2Upgrade MozillaFirefox-translations-commonUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nss-certsUpgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-glib2-langUpgrade firefox-libgtk-3-0Upgrade mozilla-nss-toolsUpgrade libfreebl3Upgrade mozilla-nssUpgrade libsoftokn3Upgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nspr-develUpgrade mozilla-nsprUpgrade libfirefox-gmodule-2_0-0Upgrade MozillaFirefoxUpgrade mozilla-nss-32bitUpgrade mozilla-nss-develUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-inuktitut | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub