PT-2018-14868

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc16 Description The issue is related to a heap-based buffer over-read in the expand mmac params function in asm/preproc.c, specifically for the special cases of the % and $ and ! characters. Recommendations...

PT-2018-14864

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc15 Description The issue is related to a NULL pointer dereference in the find label function located in asm/labels.c. This can lead to a denial of service DoS attack. Recommendations For Netwide Assembler...

CVE-2018-19209: NULL Pointer Dereference

Netwide Assembler NASM 2.14rc15 has a NULL pointer dereference in the function findlabel in asm/labels.c that will lead to a DoS attack...

CVE-2018-19215: Out-of-bounds Read

Netwide Assembler NASM 2.14rc16 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for the special cases of the % and $ and ! characters...

CVE-2018-19216: Use After Free

Netwide Assembler NASM before 2.13.02 has a use-after-free in detoken at asm/preproc.c...

CVE-2018-19214: Out-of-bounds Read

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

F5 Networks BIG-IP : BIG-IP ASM and BIG-IP AFM/BIG-IP Analytics vulnerability (K23520761)

On F5 BIG-IP 13.1.0 - 13.1.0.3, when ASM and one or more of these modules AFM/AVR are provisioned, the Traffic Management Microkernel TMM may restart while processing DNS requests when thevirtual server is configured with a DNS profile and the Protocol setting is set to TCP . CVE-2018-5505 Note :...

F5 Networks BIG-IP : BIG-IP ASM vulnerability (K12403422)

When the BIG-IP ASM system processes HTTP requests, an unusually large number of parameters can cause excessive CPU usage in the BIG-IP ASM bd process. CVE-2018-5541 Impact BIG-IP When this vulnerability is exploited, the BIG-IP ASM system may experience a denial of service DoS. BIG-IP systems th...

F5 Networks BIG-IP : BIG-IP ASM data processing vulnerability (K38243073)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.3 / 12.1.3.2 / 13.1.0. It is, therefore, affected by a vulnerability as referenced in the K38243073 advisory. - On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may...

F5 Networks BIG-IP : BIG-IP ASM vulnerability (K75432956)

Under certain conditions, on F5 BIG-IP ASM 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, 11.5.1-11.5.6, or 11.2.1, when processing CSRF protections, the BIG-IP ASM bd process may restart and produce a core file. CVE-2018-5539 Impact BIG-IP The affected BIG-IP ASM system fails to process...

Netwide Assembler Null Pointer Dereference Vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A null pointer dereference vulnerability exists in the asm/labels.c file in NASM, which can be exploited to cause a denial of service null pointer backreference with the help of a specially crafted fil...

CVE-2018-16517

asm/labels.c in Netwide Assembler NASM is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file...

CVE-2018-16517

CVE-2018-16517 affects NASM: a NULL pointer dereference in asm/labels.c can allow a denial of service via a crafted input file. The vulnerability is documented in multiple advisories and Nessus plugins, and is addressed by NASM 2.14.02+/later patches in several distributions (e.g., openSUSE/SUSE ...

CVE-2018-1000667

NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption crashed of nasm when handling a crafted file due to function assemblefileinname, dependptr at asm/nasm.c:482. vulnerability in function assemblefileinname, dependptr at asm/nasm.c:482. that can result in...

Memory corruption

NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption crashed of nasm when handling a crafted file due to function assemblefileinname, dependptr at asm/nasm.c:482. vulnerability in function assemblefileinname, dependptr at asm/nasm.c:482. that can result in...

CVE-2018-1000667

CVE-2018-1000667 is referenced in connected content as a memory corruption (crash) in Netwide Assembler (NASM) when handling a crafted file. Specifically, the issue is described in the function assemble_file(inname, depend_ptr) at asm/nasm.c:482, affecting NASM 2.14rc15 and earlier. The vulnerabi...

PT-2018-13606

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM affected versions not specified Description The issue is related to a NULL Pointer Dereference in the asm/labels.c file of Netwide Assembler NASM. This allows an attacker to cause a denial of service by providing a craft...

CVE-2018-16517: NULL Pointer Dereference

asm/labels.c in Netwide Assembler NASM is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file...

CVE-2018-1000667: Improper Restriction of Operations within the Bounds of a Memory Buffer

NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption crashed of nasm when handling a crafted file due to function assemblefileinname, dependptr at asm/nasm.c:482. vulnerability in function assemblefileinname, dependptr at asm/nasm.c:482. that can result in...

CVE-2018-5539

Under certain conditions, on F5 BIG-IP ASM 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, 11.5.1-11.5.6, or 11.2.1, when processing CSRF protections, the BIG-IP ASM bd process may restart and produce a core file...