SUSE CVE-2017-17815

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in ismmacro in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts...

SUSE CVE-2017-17818

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in pastetokens in asm/preproc.c...

SUSE CVE-2017-17820

In Netwide Assembler NASM 2.14rc0, there is a use-after-free in pplistonemacro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors...

SUSE CVE-2018-8882

Netwide Assembler NASM 2.13.02rc2 has a stack-based buffer under-read in the function ieeeshr in asm/float.c via a large shift value...

SUSE CVE-2018-8881

Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...

SUSE CVE-2018-8883

Netwide Assembler NASM 2.13.02rc2 has a buffer over-read in the parseline function in asm/parser.c via uncontrolled access to nasmregflags...

SUSE CVE-2018-10016

Netwide Assembler NASM 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file...

SUSE CVE-2018-10254

Netwide Assembler NASM 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Remote attackers could leverage this vulnerability to cause a denial of service or possibly have unspecified other impact via a crafted ELF file...

SUSE CVE-2018-10316

Netwide Assembler NASM 2.14rc0 has an endless while loop in the assemblefile function of asm/nasm.c because of a globallineno integer overflow...

SUSE CVE-2018-16382

Netwide Assembler NASM 2.14rc15 has a buffer over-read in x86/regflags.c...

SUSE CVE-2018-16517

asm/labels.c in Netwide Assembler NASM is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file...

SUSE CVE-2018-16999

Netwide Assembler NASM 2.14rc15 has an invalid memory write segmentation fault in expandsmacro in preproc.c, which allows attackers to cause a denial of service via a crafted input file...

SUSE CVE-2018-19209

Netwide Assembler NASM 2.14rc15 has a NULL pointer dereference in the function findlabel in asm/labels.c that will lead to a DoS attack...

SUSE CVE-2018-19214

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

SUSE CVE-2018-19213

Netwide Assembler NASM through 2.14rc16 has memory leaks that may lead to DoS, related to nasmmalloc in nasmlib/malloc.c...

SUSE CVE-2018-19216

Netwide Assembler NASM before 2.13.02 has a use-after-free in detoken at asm/preproc.c...

SUSE CVE-2018-19755

There is an illegal address access at asm/preproc.c function: ismmacro in Netwide Assembler NASM 2.14rc16 that will cause a denial of service out-of-bounds array access because a certain conversion can result in a negative integer...

SUSE CVE-2018-20535

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during a line-number increment attempt...

SUSE CVE-2018-20538

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

SUSE CVE-2019-6290

An infinite recursion issue was discovered in eval.c in Netwide Assembler NASM through 2.14.02. There is a stack exhaustion problem resulting from infinite recursion in the functions expr, rexp, bexpr and cexpr in certain scenarios involving lots of '' characters. Remote attackers could leverage...