yasm 安全漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm v1.3.0, which stems from a post-release reuse issue in the function yasmintnumcopy in /nasm/nasm-pp.c. The vulnerability is caused by the use of the function yasmintnumcopy...

yasm 缓冲区错误漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A buffer error vulnerability exists in yasm v1.3.0, which stems from a heap overflow in the function handledotlabel...

yasm 缓冲区错误漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A buffer error vulnerability exists in yasm version 1.3.0.55.g101bc, which stems from the discovery of a contained stack overflow vulnerability via the parseexpr5 function in /nasm/nasm-parse.c...

OESA-2023-1245 nasm security update

NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax. It also provides tools in RDOFF binary format, includes linker, library manager, loader, and information dump. Security Fixes...

Vulnerability of the `quote_for_pmake()` function in the Netwide Assembler (NASM) assembler; this allows a hacker to execute arbitrary code.

The vulnerability of the quoteforpmake function asm/nasm.c in the Netwide Assembler NASM compiler is related to the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Shoggoth - Asmjit Based Polymorphic Encryptor

Shoggoth is an open-source project based on C++ and asmjit library used to encrypt given shellcode, PE, and COFF files polymorphically. Shoggoth will generate an output file that stores the payload and its corresponding loader in an obfuscated form. Since the content of the output is...

SUSE CVE-2022-44370

NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856...

CVE-2022-44370

NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856...

DEBIAN-CVE-2022-44368

NASM v2.16 was discovered to contain a null pointer deference in the NASM component...

DEBIAN-CVE-2022-44370

NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856...

NASM 缓冲区错误漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in NASM v2.16, which stems from a heap buffer overflow vulnerability in the component quoteforpmake asm/nasm.c:856...

PT-2023-14456 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: NASM version 2.16 Description: A null pointer dereference was discovered in the NASM component. Recommendations: For NASM version 2.16, at the moment, there is no information about a newer version that contains a fix for this issue...

PT-2023-2366 · Unknown +2 · Netwide Assembler +2

Name of the Vulnerable Software and Affected Versions: Netwide Assembler NASM version 2.16 Description: The issue is related to a heap buffer overflow in the quote for pmake function of the Netwide Assembler NASM. This overflow can occur due to the operation exceeding the memory buffer boundaries...

CRASM 代码问题漏洞

CRASM is a portable cross assembler for the 6800, 6801, 6803, 6502, 65C02, and Z80 by Colin Bourassa, Individual Developer. A security vulnerability exists in CRASM version 1.8-3, which stems from invalid input validation, where a specific file crasm passed to a command-line application may cause...

K62695363: OpenSSL vulnerability CVE-2018-0733

Security Advisory Description Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than th...

SUSE CVE-2008-2719

Off-by-one error in the ppscan function preproc.c in Netwide Assembler NASM 2.02 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted file that triggers a stack-based buffer overflow...

SUSE CVE-2008-7177

Buffer overflow in the listing module in Netwide Assembler NASM before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719...

SUSE CVE-2016-1953

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vecto...

SUSE CVE-2017-7223

GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow of size 1 while attempting to unget an EOF character from the input stream, potentially leading to a program crash...

SUSE CVE-2017-10686

In Netwide Assembler NASM 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token function and freed in the detoken function called by ppgetline - it is used again at multiple positions later that could cause multiple damages. F...