CVE-2022-29654

Buffer overflow vulnerability in quoteforpmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file...

CVE-2023-38665

The CVE-2023-38665 entry describes a null pointer dereference in ieee_write_file within nasm 2.16rc0, leading to denial of service (crash). Connected OpenVAS/NASL records from Huawei EulerOS advisories map this vulnerability to nasm packages in EulerOS 2.0 SP12/ SP13 and related advisories, but n...

CVE-2023-38668

CVE-2023-38668 affects NASM up to version 2.16, with a stack-based buffer over-read in the disassembly path (disasm) that can crash the process and cause a denial of service. Documented characteristics from connected sources indicate a local attack surface with low exploit complexity; no patch/re...

CVE-2020-21685

Buffer Overflow vulnerability in hashfindi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file...

CVE-2020-21687

Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file...

nasm 代码问题漏洞

Nasm is an open source programming tool software from The Nasm Development Team team. A security vulnerability exists in nasm version 2.16rc0, which stems from a null pointer dereference issue in ieeewritefile...

CVE-2020-21687

Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file...

PT-2023-26540 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: nasm version 2.16 Description: A stack-based buffer over-read issue in the disasm function allows attackers to cause a denial of service. Recommendations: For nasm version 2.16, at the moment, there is no information about a newer version tha...

CVE-2023-38668

Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service crash...

CVE-2020-18780

A Use After Free vulnerability in function newToken in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command...

CVE-2022-29654

Buffer overflow vulnerability in quoteforpmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file...

CVE-2022-29654

CVE-2022-29654 affects NASM; a buffer overflow in the function quote_for_pmake within asm/nasm.c allows denial of service when parsing a crafted file. Affected software: NASM up to version before 2.15.05. Root cause per sources: buffer overflow in quote_for_pmake in nasm.c. Impact: DoS (crash/unu...

CVE-2023-38667

CVE-2023-38667 : The NASM NASM disassembly component has a stack-based buffer over-read in the disasm path affecting NASM version 2.16 (including 2.16 RCs), enabling denial of service when processing crafted input. Multiple vendors/distributions (Red Hat, OSV, NVD mirrors) corroborate the issue; ...

CVE-2020-21687

CVE-2020-21687 corresponds to a buffer overflow in the scan function of nasm (stdscan.c) in version 2.15rc0. The vulnerability allows a remote attacker to cause a denial of service by processing a crafted ASM file. Public documents in connected sources consistently reference the same description ...

CVE-2020-18780

A Use After Free vulnerability in function newToken in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command...

CVE-2023-38665

Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash...

CVE-2023-38665

Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash...

PT-2023-26541 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: nasm version 2.16 Description: The issue is a stack-based buffer over-read in the disasm component, which allows attackers to cause a denial of service, resulting in a crash. Recommendations: For nasm version 2.16, at the moment, there is no...

CVE-2020-21686

CVE-2020-21686 is a stack-use-after-scope vulnerability in NASM’s preproc.c expand_mmac_params function, present in NASM releases before 2.15.04. It allows remote denial of service via a crafted ASM file. Multiple connected sources corroborate the issue and note a security update; remediation is ...

CVE-2020-21528

CVE-2020-21528 is a NASM segmentation fault in ieee_segment (outieee.c) that allows denial of service via a crafted assembly file. Affected products/versions cited in connected docs include NASM 2.14.03 and 2.15. Upstream/OS advisories recommend upgrading to NASM 2.16.01 or newer to remediate (e....