In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nasm | Jan 20, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade libfirefox-gio-2_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-langUpgrade firefox-libffi4Upgrade libfirefox-glib-2_0-0Upgrade libfirefox-gobject-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-toolsUpgrade libfreebl3Upgrade mozilla-nss-32bitUpgrade firefox-glib2-toolsUpgrade firefox-libcairo2Upgrade libfirefox-gmodule-2_0-0Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-develUpgrade mozilla-nss-certsUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libatk-1_0-0Upgrade nasmUpgrade firefox-gdk-pixbuf-langUpgrade firefox-libcairo-gobject2Upgrade mozilla-nss-certs-32bitUpgrade MozillaFirefoxUpgrade firefox-libpango-1_0-0Upgrade libfreebl3-32bitUpgrade firefox-atk-langUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-branding-upstreamUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodule-thaiUpgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nssUpgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nspr-32bitUpgrade libsoftokn3-32bitUpgrade firefox-glib2-langUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nsprUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libgtk-3-0Upgrade mozilla-nspr-develUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libffi7Upgrade libsoftokn3Upgrade mozilla-nss-toolsUpgrade firefox-libharfbuzz0 | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub