Lucene search
+L

847 matches found

CNVD
CNVD
•added 2019/01/15 12:00 a.m.•84 views

Netwide Assembler (NASM) Denial of Service Vulnerability (CNVD-2019-01857)

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A security vulnerability exists in the eval.c file in NASM 2.14.02 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service infinite recursion and stack...

5.5CVSS6.7AI score0.01261EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/15 12:00 a.m.•4 views

CVE-2019-6290: Uncontrolled Recursion

An infinite recursion issue was discovered in eval.c in Netwide Assembler NASM through 2.14.02. There is a stack exhaustion problem resulting from infinite recursion in the functions expr, rexp, bexpr and cexpr in certain scenarios involving lots of '' characters. Remote attackers could leverage...

5.5CVSS6.3AI score0.01261EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/01/15 12:00 a.m.•9 views

PT-2019-18078 · Netwide +2 · Netwide Assembler +2

Name of the Vulnerable Software and Affected Versions: Netwide Assembler NASM versions prior to 2.14.03 Description: A stack exhaustion problem exists due to the expr6 function making recursive calls to itself in certain scenarios involving lots of '!' or '+' or '-' characters. This could allow...

7.8CVSS6AI score0.01272EPSS
SaveExploits9References33
CNVD
CNVD
•added 2019/01/15 12:00 a.m.•19 views

Netwide Assembler (NASM) Denial of Service Vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A security vulnerability exists in the 'expr6' function of the eval.c file in NASM 2.14.02 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service with the...

5.5CVSS6.7AI score0.01272EPSS
SaveExploits1References1
NVD
NVD
•added 2018/12/28 4:29 p.m.•43 views

CVE-2018-20538

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

5.5CVSS5.4AI score0.00789EPSS
SaveExploits1References1
OSV
OSV
•added 2018/12/28 4:29 p.m.•7 views

DEBIAN-CVE-2018-20535

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during a line-number increment attempt...

5.5CVSS7.6AI score0.00795EPSS
SaveExploits1References1
OSV
OSV
•added 2018/12/28 4:29 p.m.•18 views

CVE-2018-20535

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during a line-number increment attempt...

5.5CVSS6.6AI score
SaveExploits0References1
OSV
OSV
•added 2018/12/28 4:29 p.m.•8 views

DEBIAN-CVE-2018-20538

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

5.5CVSS6.8AI score0.00789EPSS
SaveExploits1References1
OSV
OSV
•added 2018/12/28 4:29 p.m.•15 views

CVE-2018-20538

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

5.5CVSS6.6AI score
SaveExploits0References1
Prion
Prion
•added 2018/12/28 4:29 p.m.•36 views

Design/Logic Flaw

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

4.3CVSS5.5AI score0.00789EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2018/12/28 4:29 p.m.•38 views

UBUNTU-CVE-2018-20538

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

5.5CVSS6.4AI score0.00789EPSS
SaveExploits1References2
Prion
Prion
•added 2018/12/28 4:29 p.m.•27 views

Design/Logic Flaw

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during a line-number increment attempt...

4.3CVSS5.7AI score0.00795EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2018/12/28 3:00 a.m.•45 views

CVE-2018-20535

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during a line-number increment attempt...

5.7AI score0.00795EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2018/12/28 3:00 a.m.•76 views

CVE-2018-20535

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during a line-number increment attempt...

5.5CVSS5.7AI score0.00795EPSS
SaveExploits1
CVE
CVE
•added 2018/12/28 3:00 a.m.•86 views

CVE-2018-20535

The CVE-2018-20535 entry concerns Netwide Assembler (NASM) with a use-after-free in asm/preproc.c (pp_getline) in NASM 2.14rc16, which the documentation states will cause a denial of service during a line-number increment. Connected sources (Astra Linux security bulletin) corroborate a NASM use-a...

5.5CVSS5.5AI score0.00795EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
•added 2018/12/28 12:00 a.m.•18 views

Netwide Assembler (NASM) Post-Release Reuse Vulnerability

Netwide Assembler NASM is a portable, modular 80x86 and x86-64 assembler. A post-release reuse vulnerability in the ppgetline function in asm/preproc.c in Netwide Assembler NASM 2.14rc16 can be exploited by an attacker to cause a denial of service...

5.5CVSS6.8AI score0.00789EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/12/28 12:00 a.m.•6 views

PT-2018-15416

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc16 Description The issue is related to a use-after-free error in the pp getline function at asm/preproc.c. This error can cause a denial of service when attempting to increment the line number...

5.5CVSS0.00795EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/28 12:00 a.m.•3 views

CVE-2018-20535: Use After Free

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during a line-number increment attempt...

5.5CVSS6.9AI score0.00795EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/12/28 12:00 a.m.•4 views

PT-2018-15419

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc16 Description The issue is related to a use-after-free error in the pp getline function located at asm/preproc.c. This error can cause a denial of service during certain finishes tests. Recommendations For...

5.5CVSS0.00789EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/28 12:00 a.m.•6 views

CVE-2018-20538: Use After Free

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

5.5CVSS7.5AI score0.00789EPSS
SaveExploits1References2
Rows per page
Query Builder