841 matches found
SPIP Cross-Site Scripting Vulnerability
SPIP is a freeware program from SPIP for creating Internet sites. A cross-site scripting vulnerability exists in SPIP versions prior to 4.1.3 and 4.2.7, which stems from cross-site scripting in ecrire/public/assembler.php...
Buffer Overflow
Overview Affected versions of this package are vulnerable to Buffer Overflow via the exprdeleteterm function in the libyasm/expr.c component. An attacker can cause a crash or service by sending a crafted input. Remediation There is no fixed version for yasm. References - GitHub Issue - Vulnerable...
YASM Security Vulnerabilities
yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in YASM version 1.3.0.86.g9def, which originated from allowing an attacker to cause a denial of service DOS via the YASMsectionbcsfirst function in the libyasm/section.c component...
YASM Security Vulnerabilities
yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in YASM version 1.3.0.86.g9def, which stems from a Denial of Service DOS vulnerability in the expandsmacro function in the /preprocs/nasm/nasm-pp.c component...
NASM: Multiple Vulnerabilities
Background NASM is a 80x86 assembler that has been created for portability and modularity. NASM supports Pentium, P6, SSE MMX, and 3DNow extensions. It also supports a wide range of objects formats ELF, a.out, COFF, etc, and has its own disassembler. Description Multiple vulnerabilities have been...
The vulnerability of the `quote_for_pmake` function in the NASM assembler allows a attacker to trigger a service failure.
The vulnerability of the quoteforpmake function in the NASM assembler is related to copying data into a buffer without checking its size. Exploiting this vulnerability could allow an attacker to cause service failures remotely...
ROS-20230914-04
A vulnerability in the nasm assembler involves copying to a buffer without checking the size of the input data. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service through a crafted file...
ROS-20230825-06
A vulnerability in the Yasm assembler is related to null pointer dereferencing in /libyasm/intnum.c and /elf/elf.c. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service through a crafted file...
CVE-2023-38668
Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service crash...
DEBIAN-CVE-2023-38665
Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash...
DEBIAN-CVE-2020-21687
Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file...
DEBIAN-CVE-2020-21686
A stack-use-after-scope issue discovered in expandmmacparams function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file...
UBUNTU-CVE-2023-38667
Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service...
UBUNTU-CVE-2022-29654
Buffer overflow vulnerability in quoteforpmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file...
Nasm 缓冲区错误漏洞
Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in Nasm version 2.15rc0, which stems from a buffer overflow vulnerability in the stdscan.c scanning function...
PT-2023-5264 · Netwide Assembler +3 · Nasm +3
Name of the Vulnerable Software and Affected Versions: nasm versions prior to 2.15.05 Description: The issue is related to a buffer overflow vulnerability in the quote for pmake function in asm/nasm.c of the Netwide Assembler NASM. This vulnerability can be exploited by attackers to cause a denia...
PT-2023-11507 · Nasm +2 · Nasm +2
Name of the Vulnerable Software and Affected Versions: nasm version 2.14.02 Description: A Use After Free issue in the new Token function in asm/preproc.c allows attackers to cause a denial of service via a crafted nasm command. Recommendations: For nasm version 2.14.02, consider disabling the ne...
nasm 缓冲区错误漏洞
Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in nasm version 2.16, which stems from a stack-based buffer over-reading issue in disasm functions...
nasm 缓冲区错误漏洞
Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in nasm version 2.16, which stems from a stack-based buffer over-reading issue in disasm...