Ubuntu 22.04 LTS / 24.04 LTS : NASM vulnerabilities (USN-8248-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8248-1 advisory. Daisy Chen discovered that NASM was vulnerable to a heap buffer overflow when handling certain input. An attacker could possibly use this iss...

USN-8248-2 nasm regression

USN-8248-1 fixed vulnerabilities in NASM. Unfortunately the update introduced a regression which could cause NASM to crash. This update fixes the problem by reverting the fix for CVE-2021-33450 and CVE-2021-33452 in Ubuntu 24.04 LTS. We apologize for the inconvenience. Original advisory details:...

Linux Distros Unpatched Vulnerability : CVE-2021-33450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasmcalloc in nasmlib/alloc.c. CVE-2021-33450 Note that Nessus relies on the presence...

CVE-2021-33450

creationtimestamp| type| source ---|---|--- 2022-07-26 16:34:36+00:00| seen| Telegram/8TkwszhgLRwYJEMcugX-5nfNQLLg9OP6gFBMxELC8n4yyHI...

CVE-2021-33450

CVE-2021-33450 affects NASM 2.16rc0. The connected documents confirm a vulnerability in nasm_calloc() in nasmlib/alloc.c, described as memory leaks. The NVD entry lists CVSS-3.1 metrics: Local attack vector, Low attack complexity, No privileges required, User interaction required, and a base scor...