Netwide Assembler (NASM) Denial of Service Vulnerability (CNVD-2019-01857)

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A security vulnerability exists in the eval.c file in NASM 2.14.02 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service infinite recursion and stack...

PT-2019-18078 · Netwide +2 · Netwide Assembler +2

Name of the Vulnerable Software and Affected Versions: Netwide Assembler NASM versions prior to 2.14.03 Description: A stack exhaustion problem exists due to the expr6 function making recursive calls to itself in certain scenarios involving lots of '!' or '+' or '-' characters. This could allow...

Netwide Assembler (NASM) Denial of Service Vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A security vulnerability exists in the 'expr6' function of the eval.c file in NASM 2.14.02 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service with the...

PT-2019-18077 · Netwide +2 · Netwide Assembler +2

Name of the Vulnerable Software and Affected Versions: Netwide Assembler NASM versions prior to 2.14.03 Description: An infinite recursion issue was found in the functions expr, rexp, bexpr, and cexpr in certain scenarios involving lots of '' characters, resulting in a stack exhaustion problem...

CVE-2019-6290

An infinite recursion issue was discovered in eval.c in Netwide Assembler NASM through 2.14.02. There is a stack exhaustion problem resulting from infinite recursion in the functions expr, rexp, bexpr and cexpr in certain scenarios involving lots of '' characters. Remote attackers could leverage...

CVE-2019-6290

An infinite recursion issue was discovered in eval.c in Netwide Assembler NASM through 2.14.02. There is a stack exhaustion problem resulting from infinite recursion in the functions expr, rexp, bexpr and cexpr in certain scenarios involving lots of '' characters. Remote attackers could leverage...

CVE-2018-20538

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

CVE-2018-20535

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during a line-number increment attempt...

DEBIAN-CVE-2018-20535

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during a line-number increment attempt...

CVE-2018-20538

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

DEBIAN-CVE-2018-20538

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

Design/Logic Flaw

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during a line-number increment attempt...

Design/Logic Flaw

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

UBUNTU-CVE-2018-20538

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

CVE-2018-20535

The CVE-2018-20535 entry concerns Netwide Assembler (NASM) with a use-after-free in asm/preproc.c (pp_getline) in NASM 2.14rc16, which the documentation states will cause a denial of service during a line-number increment. Connected sources (Astra Linux security bulletin) corroborate a NASM use-a...

CVE-2018-20535

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during a line-number increment attempt...

CVE-2018-20535

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during a line-number increment attempt...

Netwide Assembler (NASM) Post-Release Reuse Vulnerability

Netwide Assembler NASM is a portable, modular 80x86 and x86-64 assembler. A post-release reuse vulnerability in the ppgetline function in asm/preproc.c in Netwide Assembler NASM 2.14rc16 can be exploited by an attacker to cause a denial of service...

Netwide Assembler (NASM) Post-Release Reuse Vulnerability (CNVD-2019-05122)

Netwide Assembler NASM is a portable, modular 80x86 and x86-64 assembler. A post-release reuse vulnerability in the ppgetline function in asm/preproc.c in Netwide Assembler NASM 2.14rc16 can be exploited by an attacker to cause a denial of service...

NASM Buffer Overflow Vulnerability

NASM is an open source, designed for portability and modularity of an 80x86 assembler. A buffer overflow vulnerability exists in the asm/stdscan.c file in NASM versions 2.14.01rc5 and 2.15. An attacker can exploit this vulnerability to cause a program crash with the help of a specially crafted na...