PT-2018-9602

Name of the Vulnerable Software and Affected Versions: nasm versions 2.14.01rc5 through 2.15 Description: The issue is related to a Buffer Overflow in the asm/stdscan.c file at line 130, which can cause a stack-overflow due to endless macro generation when triggered by a crafted nasm input file,...

CVE-2018-1000886: Improper Restriction of Operations within the Bounds of a Memory Buffer

nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This attack appear to be exploitable via a crafted nasm input file...

PT-2018-15391

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 3.1.1 Description The issue allows attackers to cause a denial of service, resulting in an application crash, by crafting an input file. This is related to a stack-based buffer over-read in the parseOperand function...

CVE-2018-19755

There is an illegal address access at asm/preproc.c function: ismmacro in Netwide Assembler NASM 2.14rc16 that will cause a denial of service out-of-bounds array access because a certain conversion can result in a negative integer...

Design/Logic Flaw

opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...

CVE-2018-19843

opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...

radare2 'getToken' function denial of service vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'getToken' function in the libr/asm/p/asmx86nz.c file in radare2 versions prior to 3.1.0. An attacker can exploit this vulnerability to cause a denial of service stack buffer out-of-bound...

CVE-2018-19755

There is an illegal address access at asm/preproc.c function: ismmacro in Netwide Assembler NASM 2.14rc16 that will cause a denial of service out-of-bounds array access because a certain conversion can result in a negative integer...

PT-2018-15071

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc16 Description The issue is related to an illegal address access in the is mmacro function at asm/preproc.c, which can cause a denial of service due to an out-of-bounds array access. This occurs because a...

CVE-2018-19755: Improper Input Validation

There is an illegal address access at asm/preproc.c function: ismmacro in Netwide Assembler NASM 2.14rc16 that will cause a denial of service out-of-bounds array access because a certain conversion can result in a negative integer...

Null pointer dereference

Netwide Assembler NASM 2.14rc15 has a NULL pointer dereference in the function findlabel in asm/labels.c that will lead to a DoS attack...

CVE-2018-19216

Netwide Assembler NASM before 2.13.02 has a use-after-free in detoken at asm/preproc.c...

UBUNTU-CVE-2018-19216

Netwide Assembler NASM before 2.13.02 has a use-after-free in detoken at asm/preproc.c...

CVE-2018-19216

Netwide Assembler NASM before 2.13.02 has a use-after-free in detoken at asm/preproc.c...

CVE-2018-19215

Netwide Assembler NASM 2.14rc16 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for the special cases of the % and $ and ! characters...

CVE-2018-19214

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

CVE-2018-19216

Netwide Assembler NASM before 2.13.02 has a use-after-free in detoken at asm/preproc.c...

CVE-2018-19209

Netwide Assembler NASM 2.14rc15 has a NULL pointer dereference in the function findlabel in asm/labels.c that will lead to a DoS attack...

CVE-2018-19209

CVE-2018-19209 affects NASM (Netwide Assembler), specifically version 2.14rc15 . The vulnerability is a NULL pointer dereference in the function find_label inside asm/labels.c , which can lead to a denial of service. The available connected documents consistently describe the same issue and do no...

PT-2018-14867

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc15 Description The issue is related to a heap-based buffer over-read in the expand mmac params function located in asm/preproc.c. This occurs due to insufficient input. Recommendations For Netwide Assembler...