CVE-2017-17811

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in pastetokens in asm/preproc.c, a similar issue to CVE-2017-11111...

Netwide Assembler 'do_directive' function memory misreference vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A memory misreference vulnerability exists in the 'dodirective' function of the asm/preproc.c file in NASM version 2.14rc0. A remote attacker could exploit this vulnerability to cause a denial of servi...

CVE-2017-17815: Improper Check for Unusual or Exceptional Conditions

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in ismmacro in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts...

CVE-2017-6133: Improper Input Validation

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undisclosed HTTP requests may cause a denial of service...

CVE-2017-17820: Use After Free

In Netwide Assembler NASM 2.14rc0, there is a use-after-free in pplistonemacro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors...

CVE-2017-17819: NULL Pointer Dereference

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in the function findcc in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skipwhite calls are not validated...

CVE-2017-17818: Out-of-bounds Read

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in pastetokens in asm/preproc.c...

CVE-2017-17813: Use After Free

In Netwide Assembler NASM 2.14rc0, there is a use-after-free in the pplistonemacro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors...

CVE-2017-17810: Improper Input Validation

In Netwide Assembler NASM 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments...

PT-2017-16916

Name of the Vulnerable Software and Affected Versions F5 BIG-IP software version 13.0.0 Description The issue affects F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, and WebSafe software. Undisclosed requests made to BIG-IP virtual serve...

CVE-2017-17811: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in pastetokens in asm/preproc.c, a similar issue to CVE-2017-11111...

Netwide Assembler 'pp_getline' Function Memory Misreference Vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A memory misreference vulnerability exists in the 'ppgetline' function in the asm/preproc.c file in NASM version 2.14rc0. A remote attacker could exploit this vulnerability to cause a denial of service...

CVE-2017-17812: Out-of-bounds Read

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read in the function detoken in asm/preproc.c that will cause a remote denial of service attack...

F5 Networks BIG-IP : NTP vulnerability (K31310492)

Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response. CVE-2017-6460 C Tenable Network Security, Inc. The descriptive text and package chec...

PT-2017-15015

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to a "SEGV on unknown address" that can cause a remote denial of service attack. This occurs because the asm/preproc.c file mishandles macro calls that have the wrong numb...

PT-2017-15024

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to an illegal address access in the find cc function located in asm/preproc.c. This access can lead to a remote denial of service attack. The cause is attributed to the la...

PT-2017-15025

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to a use-after-free in the pp list one macro function in asm/preproc.c, which can lead to a remote denial of service attack. This is due to the mishandling of operand-type...

PT-2017-15018

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to a use-after-free error in the pp list one macro function, located in asm/preproc.c. This error can lead to a remote denial of service DoS due to the incorrect handling ...

PT-2017-15023

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to a heap-based buffer over-read that could lead to a remote denial of service attack. This is connected to a while loop in the paste tokens function located in...

PT-2017-15017

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to a heap-based buffer over-read in the detoken function located in asm/preproc.c. This could lead to a remote denial of service attack. Recommendations For Netwide...