CVE-2020-21687

CVE-2020-21687 corresponds to a buffer overflow in the scan function of nasm (stdscan.c) in version 2.15rc0. The vulnerability allows a remote attacker to cause a denial of service by processing a crafted ASM file. Public documents in connected sources consistently reference the same description ...

CVE-2020-21528

CVE-2020-21528 is a NASM segmentation fault in ieee_segment (outieee.c) that allows denial of service via a crafted assembly file. Affected products/versions cited in connected docs include NASM 2.14.03 and 2.15. Upstream/OS advisories recommend upgrading to NASM 2.16.01 or newer to remediate (e....

CVE-2020-21686

CVE-2020-21686 is a stack-use-after-scope vulnerability in NASM’s preproc.c expand_mmac_params function, present in NASM releases before 2.15.04. It allows remote denial of service via a crafted ASM file. Multiple connected sources corroborate the issue and note a security update; remediation is ...

CVE-2020-18780

CVE-2020-18780 αφορά a Use After Free en nasm 2.14.02 (función new_Token en asm/preproc.c). El problema permite denegación de servicio con comandos nasm manipulados. Afecta NASM 2.14.02; los avisos conectados señalan mitigación/vínculos de parches: actualizar a NASM 2.15.03 o posterior (según ALA...

CVE-2022-29654

CVE-2022-29654 affects NASM; a buffer overflow in the function quote_for_pmake within asm/nasm.c allows denial of service when parsing a crafted file. Affected software: NASM up to version before 2.15.05. Root cause per sources: buffer overflow in quote_for_pmake in nasm.c. Impact: DoS (crash/unu...

PT-2023-11597

Name of the Vulnerable Software and Affected Versions nasm version 2.15rc0 Description A Buffer Overflow issue in the hash findi function in hashtbl.c allows remote attackers to cause a denial of service via crafted asm files. This issue is related to the hash findi function, but no further...

CVE-2023-38668

Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service crash...

CVE-2023-38665

Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash...

Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller

Citrix ADC RCE CVE-2023-3519 This exploit uses addresses and s...

Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller

Citrix ADC RCE CVE-2023-3519 This exploit uses addresses and s...

EulerOS 2.0 SP10 : nasm (EulerOS-SA-2023-2387)

According to the versions of the nasm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856 CVE-2022-44370 Note that Tenable Network...

EulerOS 2.0 SP10 : nasm (EulerOS-SA-2023-2361)

According to the versions of the nasm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856 CVE-2022-44370 Note that Tenable Network...

Huawei EulerOS: Security Advisory for nasm (EulerOS-SA-2023-2387)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for nasm (EulerOS-SA-2023-2361)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-46457 affecting package nasm 2.13.03-5

CVE-2022-46457 affecting package nasm 2.13.03-5. An upgraded version of the package is available that resolves this issue...

CVE-2022-44370 affecting package nasm for versions less than 2.16-1

CVE-2022-44370 affecting package nasm for versions less than 2.16-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-46456 affecting package nasm for versions less than 2.16-1

CVE-2022-46456 affecting package nasm for versions less than 2.16-1. A patched version of the package is available...

CVE-2022-46457 affecting package nasm for versions less than 2.16-1

CVE-2022-46457 affecting package nasm for versions less than 2.16-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-31722

A heap-based buffer overflow issue was discovered in Nasm's expandmmacro function, in the asm/preproc.c file. This issue could allow an attacker to trick a user into opening a specially crafted file, triggering out-of-bounds read access, causing an application to halt or crash, leading to a denia...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a segmentation violation via the expandmmacparams function in the /nasm/nasm-pp.c file. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended...