In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nasm | Jan 20, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-libffi7Upgrade libfirefox-gobject-2_0-0Upgrade firefox-gio-branding-upstreamUpgrade libfreebl3Upgrade firefox-libgtk-3-0Upgrade firefox-gtk3-branding-upstreamUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3-32bitUpgrade mozilla-nsprUpgrade firefox-libpango-1_0-0Upgrade mozilla-nss-certs-32bitUpgrade firefox-libcairo2Upgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-toolsUpgrade libfirefox-gmodule-2_0-0Upgrade MozillaFirefox-translations-otherUpgrade firefox-glib2-toolsUpgrade libfirefox-gio-2_0-0Upgrade mozilla-nss-develUpgrade libfirefox-glib-2_0-0Upgrade mozilla-nss-certsUpgrade mozilla-nssUpgrade mozilla-nspr-32bitUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozilla-nss-32bitUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-immodule-inuktitutUpgrade MozillaFirefoxUpgrade firefox-libatk-1_0-0Upgrade libsoftokn3Upgrade firefox-libffi4Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-langUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libharfbuzz0Upgrade MozillaFirefox-translations-commonUpgrade firefox-gdk-pixbuf-langUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-dataUpgrade firefox-libcairo-gobject2Upgrade mozilla-nspr-develUpgrade firefox-atk-langUpgrade mozilla-nss-toolsUpgrade firefox-glib2-langUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodule-thaiUpgrade nasmUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gdk-pixbuf-query-loaders | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub