1062 matches found
CVE-2018-8883
CVE-2018-8883 affects Netwide Assembler (NASM) 2.13.02rc2 with a buffer over-read in the parse_line function (asm/parser.c) caused by uncontrolled access to nasm_reg_flags. The provided documents identify the vulnerability; no explicit fix/patch information is given in the sources. Exploitation s...
CVE-2018-8883
Netwide Assembler NASM 2.13.02rc2 has a buffer over-read in the parseline function in asm/parser.c via uncontrolled access to nasmregflags...
CVE-2018-8881
Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...
CVE-2018-8882
Netwide Assembler NASM 2.13.02rc2 has a stack-based buffer under-read in the function ieeeshr in asm/float.c via a large shift value...
CVE-2018-8808
In radare2 2.4.0, there is a heap-based buffer over-read in the rasmdisassemble function of asm.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file...
PT-2018-18633
Name of the Vulnerable Software and Affected Versions radare2 version 2.4.0 Description The issue is a heap-based buffer over-read in the r asm disassemble function, which can be exploited by remote attackers to cause a denial of service. This can be achieved through a crafted dex file...
PT-2018-18687
Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.13.02rc2 Description The issue is related to a heap-based buffer over-read in the tokenize function located in asm/preproc.c, which occurs due to an unterminated string. Recommendations For Netwide Assembler NA...
PT-2018-18689
Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.13.02rc2 Description The issue is related to a buffer over-read in the parse line function, located in asm/parser.c. This occurs due to uncontrolled access to nasm reg flags. Recommendations For Netwide Assembl...
PT-2018-18688
Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.13.02rc2 Description The issue is related to a stack-based buffer under-read in the ieee shr function, located in asm/float.c, which occurs when a large shift value is provided. Recommendations For version...
CVE-2018-8881: Out-of-bounds Read
Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...
CVE-2018-8882: Improper Restriction of Operations within the Bounds of a Memory Buffer
Netwide Assembler NASM 2.13.02rc2 has a stack-based buffer under-read in the function ieeeshr in asm/float.c via a large shift value...
CVE-2018-8883: Out-of-bounds Read
Netwide Assembler NASM 2.13.02rc2 has a buffer over-read in the parseline function in asm/parser.c via uncontrolled access to nasmregflags...
CVE-2017-6154
On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores...
CVE-2017-6154
On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores...
CVE-2017-6154
CVE-2017-6154 affects F5 BIG-IP ASM; specifically the bd process may core dump memory when processing undisclosed data on systems with 48+ CPU cores. Vulnerable: BIG-IP ASM (bd) across versions 13.0.0, 12.1.0–12.1.3, and 11.6.1–11.6.2. Impact: core file generation, traffic processing interruption...
PT-2018-8301
Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.6.1 through 11.6.2 F5 BIG-IP versions 12.1.0 through 12.1.3.1 F5 BIG-IP version 13.0.0 Description The issue occurs on F5 BIG-IP systems when the BIG-IP ASM bd daemon processes certain types of data on systems with 48 or...
CVE-2017-6154: Improper Input Validation
On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores...
PT-2018-14869
Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM versions prior to 2.13.02 Description The issue is related to a use-after-free in the detoken function at asm/preproc.c. Recommendations For versions prior to 2.13.02, update to version 2.13.02 or later to resolve the...
macOS - 'process_policy' Stack Leak Through Uninitialized Field
/ The syscall processpolicyscope=PROCPOLICYSCOPEPROCESS, action=PROCPOLICYACTIONGET, policy=PROCPOLICYRESOURCEUSAGE, policysubtype=PROCPOLICYRUSAGECPU, attrp=, targetpid=0, targetthreadid= causes 4 bytes of uninitialized kernel stack memory to be written to userspace. The call graph looks as...
