EUVD-2017-8962

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2017-11111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Netwide Assembler NASM 2.14rc0, preproc.c allows remote attackers to cause a denial of service heap- based buffer overflow and application crash or possibly...

Huawei EulerOS: Security Advisory for nasm (EulerOS-SA-2021-1332)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for nasm (EulerOS-SA-2021-1216)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : nasm (EulerOS-SA-2021-1100)

According to the versions of the nasm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input.CVE-2018-19214 -...

Debian: Security Advisory (DLA-1041-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-17811

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in pastetokens in asm/preproc.c, a similar issue to CVE-2017-11111...

Heap overflow

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in pastetokens in asm/preproc.c, a similar issue to CVE-2017-11111...

CVE-2017-17811

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in pastetokens in asm/preproc.c, a similar issue to CVE-2017-11111...

UBUNTU-CVE-2017-17811

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in pastetokens in asm/preproc.c, a similar issue to CVE-2017-11111...

Fedora 25 : nasm (2017-a1fe6d2b86)

Fix use-after-free and heap buffer overflow vulnerabilities CVE-2017-10686, CVE-2017-11111 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

Fedora 26 : nasm (2017-6186f95179)

Fix use-after-free and heap buffer overflow vulnerabilities CVE-2017-10686, CVE-2017-11111 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

openSUSE Security Update : nasm (openSUSE-2017-901)

This update for nasm fixes the following issues : Security issues fixed : - CVE-2017-10686: Multiple heap use after free vulnerabilities. bsc1047936 - CVE-2017-11111: Heap-based buffer overflow and application crash. bsc1047925 This update was imported from the SUSE:SLE-12:Update update project...

CVE-2017-11111

NASM 2.14rc0 is affected. The root cause is in asm/preproc.c where a strcpy in paste_tokens leads to a heap-based buffer overflow, enabling remote denial of service (and potentially other impact) when processing crafted input. Related CVEs note a similar heap-based overflow and DoS. Mitigation in...

UBUNTU-CVE-2017-11111

In Netwide Assembler NASM 2.14rc0, preproc.c allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...