Lucene search
GoogleOSV:CVE-2022-44370HistoryMar 29, 2023 - 8:15 p.m.
CVE-2022-44370
2023-03-2920:15:07
Google
osv.dev
4
nasm v2.16
heap buffer overflow
quote_for_pmake
software
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
25.7%
NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856
| CPE | Name | Operator | Version |
|---|---|---|---|
| nasm | eq | nasm-2.04 | |
| nasm | eq | nasm-2.08rc4 | |
| nasm | eq | nasm-2.11rc1 | |
| nasm | eq | nasm-2.10rc12 | |
| nasm | eq | nasm-2.13rc1 | |
| nasm | eq | nasm-0.98.24 | |
| nasm | eq | nasm-2.12rc5 | |
| nasm | eq | nasm-2.09.08 | |
| nasm | eq | nasm-2.05rc3 | |
| nasm | eq | 2.15.05-1 |
Related
amazon
amazon
Important: nasm
2023-04-27 16:19:00
Important: nasm
2023-04-27 18:37:00
openvas
openvas
Huawei EulerOS: Security Advisory for nasm (EulerOS-SA-2023-2387)
2023-07-17 00:00:00
Huawei EulerOS: Security Advisory for nasm (EulerOS-SA-2023-2656)
2023-09-05 00:00:00
Huawei EulerOS: Security Advisory for nasm (EulerOS-SA-2023-2361)
2023-07-17 00:00:00
nessus
nessus
EulerOS 2.0 SP11 : nasm (EulerOS-SA-2023-2656)
2024-01-16 00:00:00
EulerOS 2.0 SP10 : nasm (EulerOS-SA-2023-2361)
2023-07-18 00:00:00
EulerOS 2.0 SP11 : nasm (EulerOS-SA-2023-2698)
2024-01-16 00:00:00
cvelist
cvelist
CVE-2022-44370
2023-03-29 00:00:00
cve
cve
CVE-2022-44370
2023-03-29 20:15:07
prion
prion
Heap overflow
2023-03-29 20:15:00
cbl_mariner
cbl_mariner
CVE-2022-44370 affecting package nasm for versions less than 2.16-1
2023-06-02 21:37:28
CVE-2022-44370 affecting package nasm 2.13.03-5
2023-06-13 20:02:41
veracode
veracode
Heap-based Buffer Overflow
2023-10-09 00:51:30
debiancve
debiancve
CVE-2022-44370
2023-03-29 20:15:07
ubuntucve
ubuntucve
CVE-2022-44370
2023-03-29 00:00:00
redhatcve
redhatcve
CVE-2022-44370
2023-05-04 06:52:37
nvd
nvd
CVE-2022-44370
2023-03-29 20:15:07
gentoo
gentoo
NASM: Multiple Vulnerabilities
2023-12-22 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
25.7%
Related for OSV:CVE-2022-44370