In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-libffi4Upgrade firefox-libcairo2Upgrade mozilla-nss-32bitUpgrade libsoftokn3Upgrade firefox-libpango-1_0-0Upgrade mozilla-nss-toolsUpgrade firefox-gtk3-toolsUpgrade firefox-gtk3-dataUpgrade firefox-libcairo-gobject2Upgrade libfirefox-glib-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-langUpgrade firefox-libgtk-3-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade libfreebl3-32bitUpgrade firefox-gdk-pixbuf-langUpgrade mozillafirefox-translations-otherUpgrade firefox-atk-langUpgrade firefox-gtk3-immodule-ximUpgrade libfirefox-gio-2_0-0Upgrade firefox-glib2-toolsUpgrade mozilla-nss-certs-32bitUpgrade mozillafirefoxUpgrade firefox-gdk-pixbuf-query-loadersUpgrade mozilla-nspr-32bitUpgrade mozillafirefox-translations-commonUpgrade firefox-libffi7Upgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libharfbuzz0Upgrade libfreebl3Upgrade mozilla-nsprUpgrade firefox-gtk3-branding-upstreamUpgrade libfirefox-gthread-2_0-0Upgrade firefox-glib2-langUpgrade mozilla-nss-develUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nss-certsUpgrade libsoftokn3-32bitUpgrade firefox-gio-branding-upstreamUpgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nssUpgrade mozilla-nspr-develUpgrade libfirefox-gobject-2_0-0Upgrade mozillafirefox-branding-sledUpgrade nasm | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub