In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade libfreebl3-32bitUpgrade firefox-gtk3-toolsUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-glib-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-langUpgrade firefox-gtk3-immodule-ximUpgrade firefox-libpango-1_0-0Upgrade firefox-libffi4Upgrade libfirefox-gio-2_0-0Upgrade firefox-glib2-toolsUpgrade firefox-atk-langUpgrade firefox-libatk-1_0-0Upgrade mozillafirefox-translations-otherUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozillafirefoxUpgrade firefox-libcairo-gobject2Upgrade libsoftokn3Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libcairo2Upgrade mozilla-nss-32bitUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libgtk-3-0Upgrade mozilla-nss-toolsUpgrade nasmUpgrade libfirefox-gobject-2_0-0Upgrade mozilla-nsprUpgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nss-develUpgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nspr-develUpgrade firefox-glib2-langUpgrade mozilla-nssUpgrade firefox-libharfbuzz0Upgrade mozillafirefox-translations-commonUpgrade libfreebl3Upgrade libfirefox-gthread-2_0-0Upgrade firefox-libffi7Upgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nss-certsUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nspr-32bitUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-branding-upstreamUpgrade libsoftokn3-32bitUpgrade mozillafirefox-branding-sled | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub