In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade libfirefox-gthread-2_0-0Upgrade mozilla-nssUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libharfbuzz0Upgrade libfirefox-gobject-2_0-0Upgrade mozilla-nsprUpgrade firefox-glib2-langUpgrade mozilla-nspr-develUpgrade firefox-gtk3-immodule-thaiUpgrade MozillaFirefoxUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libffi7Upgrade MozillaFirefox-branding-SLEDUpgrade nasmUpgrade libfreebl3Upgrade mozilla-nss-develUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations-commonUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-immodule-multipressUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nss-certsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-toolsUpgrade firefox-libgtk-3-0Upgrade firefox-libcairo-gobject2Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libffi4Upgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-ximUpgrade mozilla-nss-certs-32bitUpgrade firefox-libatk-1_0-0Upgrade libsoftokn3Upgrade firefox-atk-langUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libcairo2Upgrade firefox-glib2-toolsUpgrade firefox-gtk3-dataUpgrade libfirefox-glib-2_0-0Upgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-langUpgrade mozilla-nss-toolsUpgrade mozilla-nss-32bitUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfreebl3-32bit | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub