CVE-2017-17813

CVE-2017-17813 affects Netwide Assembler (NASM) 2.14rc0, with a use-after-free in pp_list_one_macro in asm/preproc.c that leads to remote denial of service via mishandling of line-syntax errors. The incident is documented across multiple sources in the connected documents (e.g., Nessus/OpenVAS re...

CVE-2017-17818

NASM 2.14rc0 is affected by CVE-2017-17818 (heap-based buffer over-read in paste_tokens, asm/preproc.c) that can enable a remote denial of service. The issue concerns the paste_tokens path in preproc.c and is documented across multiple advisories (e.g., Red Hat Nessus entries). Remediation is to ...

CVE-2017-17820

Technical details for CVE-2017-17820 are not publicly provided in the supplied documents. Monitor for updates; the materials reference NASM 2.14rc0 use-after-free but do not disclose affected components, exploit vectors, or fixes.

CVE-2017-17810

In Netwide Assembler NASM 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments...

CVE-2017-17819

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in the function findcc in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skipwhite calls are not validated...

CVE-2017-17812

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read in the function detoken in asm/preproc.c that will cause a remote denial of service attack...

CVE-2017-17818

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in pastetokens in asm/preproc.c...

CVE-2017-17815

CVE-2017-17815 affects NASM 2.14rc0 where an illegal address access in is_mmacro() (asm/preproc.c) can permit a remote denial of service due to a missing check for the relationship between minimum and maximum parameter counts. The description in the Initial document confirms the vulnerability and...

CVE-2017-17817

In Netwide Assembler NASM 2.14rc0, there is a use-after-free in ppverror in asm/preproc.c that will cause a remote denial of service attack...

CVE-2017-17820

In Netwide Assembler NASM 2.14rc0, there is a use-after-free in pplistonemacro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors...

CVE-2017-17815

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in ismmacro in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts...

CVE-2017-17813

In Netwide Assembler NASM 2.14rc0, there is a use-after-free in the pplistonemacro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors...

CVE-2017-17812

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read in the function detoken in asm/preproc.c that will cause a remote denial of service attack...

CVE-2017-17818

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in pastetokens in asm/preproc.c...

UBUNTU-CVE-2017-17815

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in ismmacro in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts...

UBUNTU-CVE-2017-17810

In Netwide Assembler NASM 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments...

CVE-2017-17815

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in ismmacro in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts...

CVE-2017-17814

In Netwide Assembler NASM 2.14rc0, there is a use-after-free in dodirective in asm/preproc.c that will cause a remote denial of service attack...

UBUNTU-CVE-2017-17819

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in the function findcc in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skipwhite calls are not validated...

EulerOS 2.0 SP1 : nasm (EulerOS-SA-2017-1297)

According to the version of the nasm package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Netwide Assembler NASM 2.14rc0, there is an illegal address access in the function pastetokens in preproc.c, aka a NULL pointer dereference. It wil...