In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade libsoftokn3Upgrade firefox-libatk-1_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-libgtk-3-0Upgrade libfreebl3-32bitUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-toolsUpgrade firefox-libpango-1_0-0Upgrade firefox-glib2-toolsUpgrade firefox-gtk3-immodule-amharicUpgrade libfirefox-gio-2_0-0Upgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-immodule-ximUpgrade firefox-atk-langUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libffi4Upgrade mozilla-nss-certs-32bitUpgrade firefox-libcairo2Upgrade firefox-gtk3-dataUpgrade libfirefox-glib-2_0-0Upgrade mozilla-nss-toolsUpgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gtk3-langUpgrade mozilla-nss-32bitUpgrade mozilla-nsprUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-multipressUpgrade nasmUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nspr-32bitUpgrade mozilla-nssUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-glib2-langUpgrade firefox-gio-branding-upstreamUpgrade mozilla-nss-certsUpgrade libfirefox-gmodule-2_0-0Upgrade libsoftokn3-32bitUpgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nss-develUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nspr-develUpgrade libfirefox-gthread-2_0-0Upgrade firefox-libffi7Upgrade MozillaFirefoxUpgrade libfreebl3Upgrade MozillaFirefox-translations-common | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub