Lucene search
+L

769 matches found

CNVD
CNVD
added 2018/04/24 12:0 a.m.5 views

Netwide Assembler Infinite While Loop Vulnerability

Netwide Assembler NASM is a portable, modular 80x86 and x86-64 assembler. An infinite while loop vulnerability exists in the assemblefile function of asm/nasm.c in Netwide Assembler NASM 2.14rc0. The vulnerability arises due to a globallineno integer overflow. An attacker can exploit this...

5.5CVSS6.9AI score0.01098EPSS
SaveExploits1References1
OSV
OSV
added 2018/04/21 4:29 p.m.3 views

DEBIAN-CVE-2018-10254

Netwide Assembler NASM 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Remote attackers could leverage this vulnerability to cause a denial of service or possibly have unspecified other impact via a crafted ELF file...

7.8CVSS8AI score0.01437EPSS
SaveExploits1References1
OSV
OSV
added 2018/04/21 4:29 p.m.3 views

UBUNTU-CVE-2018-10254

Netwide Assembler NASM 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Remote attackers could leverage this vulnerability to cause a denial of service or possibly have unspecified other impact via a crafted ELF file...

7.8CVSS7AI score0.01437EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2018/04/16 7:53 a.m.28 views

CVE-2018-10016

Netwide Assembler NASM 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file...

5.5CVSS3.6AI score0.01093EPSS
SaveExploits1References1
NVD
NVD
added 2018/04/11 5:29 a.m.19 views

CVE-2018-10016

Netwide Assembler NASM 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file...

5.5CVSS5.3AI score0.01093EPSS
SaveExploits1References3
Prion
Prion
added 2018/04/11 5:29 a.m.22 views

Design/Logic Flaw

Netwide Assembler NASM 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file...

4.3CVSS5.4AI score0.01093EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2018/04/11 5:29 a.m.23 views

CVE-2018-10016

Netwide Assembler NASM 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file...

5.5CVSS5.7AI score
SaveExploits0References3
OSV
OSV
added 2018/04/11 5:29 a.m.4 views

UBUNTU-CVE-2018-10016

Netwide Assembler NASM 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file...

5.5CVSS7.1AI score0.01093EPSS
SaveExploits1References2
OSV
OSV
added 2018/04/11 5:29 a.m.6 views

DEBIAN-CVE-2018-10016

Netwide Assembler NASM 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file...

5.5CVSS6.1AI score0.01093EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2018/04/11 5:0 a.m.39 views

CVE-2018-10016

Netwide Assembler NASM 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file...

5.5CVSS6.3AI score0.01093EPSS
SaveExploits1
CVE
CVE
added 2018/04/11 5:0 a.m.151 views

CVE-2018-10016

CVE-2018-10016 : Netwide Assembler (NASM) 2.14rc0 has a division-by-zero in the expr5 function (asm/eval.c) triggered by a malformed input file. The vulnerability is in NASM’s evaluation path and is described with a CVSS base score of 5.5 (MEDIUM) for a local, low‑complexity to exploit vector. Th...

5.5CVSS5.9AI score0.01093EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
added 2018/04/11 12:0 a.m.6 views

Netwide Assembler De-Zero Vulnerability

Netwide Assembler NASM is a portable, modular 80x86 and x86-64 assembler. A divide-by-zero vulnerability exists in the expr5 function in asm/eval.c in Netwide Assembler NASM 2.14rc0. An attacker can exploit this vulnerability via a malformed input file to cause a divide-by-zero error...

5.5CVSS6.9AI score0.01093EPSS
SaveExploits1References1
Prion
Prion
added 2018/03/27 9:29 p.m.22 views

Design/Logic Flaw

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...

4.3CVSS5.9AI score0.08606EPSS
SaveExploits0References14Affected Software1
NVD
NVD
added 2018/03/27 9:29 p.m.28 views

CVE-2018-0733

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...

5.9CVSS5.5AI score0.08606EPSS
SaveExploits0References14
CVE
CVE
added 2018/03/27 9:0 p.m.165 views

CVE-2018-0733

OpenSSL CVE-2018-0733 targets PA-RISC on HP-UX, where the PA-RISC CRYPTO_memcmp implementation is buggy and effectively compares only the least significant bit of each byte. This can allow forging messages to be accepted as authentic, reducing the effort needed for an attack. The vulnerability is...

5.9CVSS6AI score0.08606EPSS
SaveExploits0References14Affected Software1
AlpineLinux
AlpineLinux
added 2018/03/27 9:0 p.m.39 views

CVE-2018-0733

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...

5.9CVSS6AI score0.08606EPSS
SaveExploits0
CNVD
CNVD
added 2018/03/21 12:0 a.m.7 views

Netwide Assembler Stack Buffer Overflow Vulnerability

Netwide Assembler NASM is a portable, modular 80x86 and x86-64 assembler. A stack buffer overflow vulnerability exists in the ieeeshr function in asm/float.c in Netwide Assembler NASM 2.13.02rc2, for which there is currently no detailed vulnerability description...

7.8CVSS7.4AI score0.00378EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/03/21 12:0 a.m.7 views

Netwide Assembler Buffer Out-of-Bounds Read Vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A buffer out-of-bounds read vulnerability exists in the 'parseline' function of the asm/parser.c file in NASM version 2.13.02rc2, for which there is currently no detailed vulnerability description...

7.8CVSS7AI score0.00381EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/03/21 12:0 a.m.6 views

Netwide Assembler Heap Buffer Over-Read Vulnerability

Netwide Assembler NASM is a portable, modular 80x86 and x86-64 assembler. A heap buffer over-read vulnerability exists in the tokenize function in asm/preproc.c in Netwide Assembler NASM 2.13.02rc2, for which there is currently no detailed vulnerability description...

7.3CVSS7.1AI score0.0111EPSS
SaveExploits0References1
Prion
Prion
added 2018/03/20 11:29 p.m.17 views

Code injection

Netwide Assembler NASM 2.13.02rc2 has a buffer over-read in the parseline function in asm/parser.c via uncontrolled access to nasmregflags...

4.6CVSS6.3AI score0.00381EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder