936 matches found
Netwide Assembler (NASM) Post-Release Reuse Vulnerability (CNVD-2019-05122)
Netwide Assembler NASM is a portable, modular 80x86 and x86-64 assembler. A post-release reuse vulnerability in the ppgetline function in asm/preproc.c in Netwide Assembler NASM 2.14rc16 can be exploited by an attacker to cause a denial of service...
PT-2018-15419
Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc16 Description The issue is related to a use-after-free error in the pp getline function located at asm/preproc.c. This error can cause a denial of service during certain finishes tests. Recommendations For...
Linux/x64 - Disable ASLR Security Shellcode (93 Bytes)
/ ASLR Address Space Layout Randomization Disable Shellcode Language C & ASM - Linux/x8664 Author : Kağan Çapar contact: email protected shellcode len : 93 bytes compilation: gcc -fno-stack-protector -z execstack .c -o Test: run shellcode ./aslr etc. check : cat /proc/sys/kernel/randomizevaspace...
CVE-2018-20456
In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service application crash in libr/util/strbuf.c via a stack-based buffer over-read by crafting an input file, a related issue to CVE-2018-20455...
Tiny C Compiler Out-of-Bounds Write Vulnerability
Tiny C Compiler is a C compiler for x86, X86-64 and ARM processors created by Fabrice Bellard. An out-of-bounds write vulnerability exists in the asmparsedirective function in tccasm.c in Tiny C Compiler also known as TinyCC or TCC 0.9.27, which can be exploited by an attacker via a specially...
UBUNTU-CVE-2018-20376
An issue was discovered in Tiny C Compiler aka TinyCC or TCC 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the asmparsedirective function in tccasm.c...
DEBIAN-CVE-2018-20376
An issue was discovered in Tiny C Compiler aka TinyCC or TCC 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the asmparsedirective function in tccasm.c...
CVE-2018-1000886
nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This attack appear to be exploitable via a crafted nasm input file...
CVE-2018-1000886
nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This attack appear to be exploitable via a crafted nasm input file...
PT-2018-9602
Name of the Vulnerable Software and Affected Versions: nasm versions 2.14.01rc5 through 2.15 Description: The issue is related to a Buffer Overflow in the asm/stdscan.c file at line 130, which can cause a stack-overflow due to endless macro generation when triggered by a crafted nasm input file,...
CVE-2018-1000886: Improper Restriction of Operations within the Bounds of a Memory Buffer
nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This attack appear to be exploitable via a crafted nasm input file...
PT-2018-15391
Name of the Vulnerable Software and Affected Versions radare2 versions prior to 3.1.1 Description The issue allows attackers to cause a denial of service, resulting in an application crash, by crafting an input file. This is related to a stack-based buffer over-read in the parseOperand function...
CVE-2018-19755
There is an illegal address access at asm/preproc.c function: ismmacro in Netwide Assembler NASM 2.14rc16 that will cause a denial of service out-of-bounds array access because a certain conversion can result in a negative integer...
Design/Logic Flaw
opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...
CVE-2018-19843
opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...
radare2 'getToken' function denial of service vulnerability
radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'getToken' function in the libr/asm/p/asmx86nz.c file in radare2 versions prior to 3.1.0. An attacker can exploit this vulnerability to cause a denial of service stack buffer out-of-bound...
PT-2018-15071
Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc16 Description The issue is related to an illegal address access in the is mmacro function at asm/preproc.c, which can cause a denial of service due to an out-of-bounds array access. This occurs because a...
CVE-2018-19755: Improper Input Validation
There is an illegal address access at asm/preproc.c function: ismmacro in Netwide Assembler NASM 2.14rc16 that will cause a denial of service out-of-bounds array access because a certain conversion can result in a negative integer...