EUVD-2019-10887

Malware in sbrugna...

Stack overflow

In Netwide Assembler NASM 2.14.02, stack consumption occurs in expr functions in asm/eval.c. This potentially affects the relationships among expr0, expr1, expr2, expr3, expr4, expr5, and expr6 and stdscan in asm/stdscan.c. This is similar to CVE-2019-6290 and CVE-2019-6291...

CVE-2019-6291

CVE-2019-6291 (NASM) affects Netwide Assembler up to 2.14.02. The issue is a stack-exhaustion vulnerability in function expr6() in eval.c caused by recursive calls when parsing lots of '!' '+' or '-' in a crafted asm file, enabling remote denial-of-service. Available sources confirm the vulnerabi...