CVE-2023-38667

CVE-2023-38667 : The NASM NASM disassembly component has a stack-based buffer over-read in the disasm path affecting NASM version 2.16 (including 2.16 RCs), enabling denial of service when processing crafted input. Multiple vendors/distributions (Red Hat, OSV, NVD mirrors) corroborate the issue; ...

PT-2023-26540 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: nasm version 2.16 Description: A stack-based buffer over-read issue in the disasm function allows attackers to cause a denial of service. Recommendations: For nasm version 2.16, at the moment, there is no information about a newer version tha...

CVE-2023-38667

Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service...

CVE-2020-21687

CVE-2020-21687 corresponds to a buffer overflow in the scan function of nasm (stdscan.c) in version 2.15rc0. The vulnerability allows a remote attacker to cause a denial of service by processing a crafted ASM file. Public documents in connected sources consistently reference the same description ...

CVE-2020-21685

Buffer Overflow vulnerability in hashfindi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file...

PT-2023-11599 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: nasm version 2.15rc0 Description: The issue is related to a Buffer Overflow vulnerability in the scan function in stdscan.c. This vulnerability allows remote attackers to cause a denial of service via crafted asm files. Recommendations: For...

CVE-2020-18780

A Use After Free vulnerability in function newToken in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command...

CVE-2020-21528

CVE-2020-21528 is a NASM segmentation fault in ieee_segment (outieee.c) that allows denial of service via a crafted assembly file. Affected products/versions cited in connected docs include NASM 2.14.03 and 2.15. Upstream/OS advisories recommend upgrading to NASM 2.16.01 or newer to remediate (e....

CVE-2022-29654

Buffer overflow vulnerability in quoteforpmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file...

CVE-2020-21686

CVE-2020-21686 is a stack-use-after-scope vulnerability in NASM’s preproc.c expand_mmac_params function, present in NASM releases before 2.15.04. It allows remote denial of service via a crafted ASM file. Multiple connected sources corroborate the issue and note a security update; remediation is ...

PT-2023-11593

Name of the Vulnerable Software and Affected Versions nasm versions 2.14.03 through 2.15 Description A Segmentation Fault issue in the ieee segment function in outieee.c allows remote attackers to cause a denial of service via crafted assembly files. Recommendations For nasm versions 2.14.03...

CVE-2022-29654

Buffer overflow vulnerability in quoteforpmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file...

CVE-2020-18780

A Use After Free vulnerability in function newToken in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command...

Nasm 资源管理错误漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in Nasm version 2.14.02, which stems from a post-release reuse vulnerability in the newToken function of asm/preproc.c. The vulnerability is caused by the use of the newToken functi...

CVE-2023-38665

The CVE-2023-38665 entry describes a null pointer dereference in ieee_write_file within nasm 2.16rc0, leading to denial of service (crash). Connected OpenVAS/NASL records from Huawei EulerOS advisories map this vulnerability to nasm packages in EulerOS 2.0 SP12/ SP13 and related advisories, but n...

CVE-2023-38667

Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service...

CVE-2023-38667

Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service...

CVE-2020-21687

Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file...

CVE-2023-38668

Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service crash...

nasm 安全漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability previously existed in nasm version 2.15.04, which stemmed from a buffer overflow problem found in the Expandmmacparams function of preproc.c. The vulnerability was caused by the use of the...