Ubuntu 22.04 LTS / 24.04 LTS : NASM vulnerabilities (USN-8248-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8248-1 advisory. Daisy Chen discovered that NASM was vulnerable to a heap buffer overflow when handling certain input. An attacker could possibly use this iss...

USN-8248-2 nasm regression

USN-8248-1 fixed vulnerabilities in NASM. Unfortunately the update introduced a regression which could cause NASM to crash. This update fixes the problem by reverting the fix for CVE-2021-33450 and CVE-2021-33452 in Ubuntu 24.04 LTS. We apologize for the inconvenience. Original advisory details:...

SUSE CVE-2021-33452

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasmmalloc in nasmlib/alloc.c...

CVE-2021-33452

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasmmalloc in nasmlib/alloc.c...

AZL-41956 CVE-2021-33452 affecting package nasm 2.16.01-1

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasmmalloc in nasmlib/alloc.c...

UBUNTU-CVE-2021-33452

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasmmalloc in nasmlib/alloc.c...

CVE-2021-33452

CVE-2021-33452 impacts NASM 2.16rc0, where the issue is a memory leak in nasm_malloc() inside nasmlib/alloc.c. The available sources describe the vulnerability as a leak, with no explicit exploit details or patched versions in the provided documents. The CVE entry lists the vulnerability and CVSS...