PT-2017-15025

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to a use-after-free in the pp list one macro function in asm/preproc.c, which can lead to a remote denial of service attack. This is due to the mishandling of operand-type...

PT-2017-15018

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to a use-after-free error in the pp list one macro function, located in asm/preproc.c. This error can lead to a remote denial of service DoS due to the incorrect handling ...

PT-2017-15023

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to a heap-based buffer over-read that could lead to a remote denial of service attack. This is connected to a while loop in the paste tokens function located in...

PT-2017-15020

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to an illegal address access in the is mmacro function located in asm/preproc.c. This could lead to a remote denial of service attack due to the lack of a check for the...

PT-2017-15016

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is a heap-based buffer overflow that can cause a remote denial of service attack. It is related to a strcpy in paste tokens in asm/preproc.c. This is similar to a previously known...

PT-2017-15021

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to a use-after-free in the pp getline function located in asm/preproc.c. This could lead to a remote denial of service attack. Recommendations For Netwide Assembler NASM...

PT-2017-13308

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to an illegal address access in the paste tokens function in preproc.c, which can lead to a remote denial of service due to a NULL pointer dereference. Recommendations For...

CVE-2017-14228: NULL Pointer Dereference

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in the function pastetokens in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service...

PT-2017-11747

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue allows remote attackers to cause a denial of service, which can lead to a heap-based buffer overflow and application crash, or possibly have other unspecified impacts. This can be...

CVE-2017-11111: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Netwide Assembler NASM 2.14rc0, preproc.c allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

PT-2017-11438

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to multiple heap use after free vulnerabilities in the tool nasm. The heap is allocated in the token function and freed in the detoken function, which is called by pp...

CVE-2008-7177

Buffer overflow in the listing module in Netwide Assembler NASM before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719...

CVE-2008-7177: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the listing module in Netwide Assembler NASM before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719...

CVE-2008-2719: Undefined Security Weakness

Off-by-one error in the ppscan function preproc.c in Netwide Assembler NASM 2.02 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted file that triggers a stack-based buffer overflow...