JLSEC-2026-588

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in findcc in modules/preprocs/nasm/nasm-pp.c...

PT-2026-50756

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in find cc in modules/preprocs/nasm/nasm-pp.c...

EUVD-2021-20162

Malware in sbrugna...

yasm find_cc function denial of service vulnerability

yasm is yasm open source a completely rewritten Netwide assembler. A denial of service vulnerability exists in yasm version 1.3.0, which stems from the presence of a NULL pointer dereference in the findcc function in modules/preprocs/nasm/nasm-pp.c. An attacker could exploit this vulnerability to...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the function findcc in modules/preprocs/nasm/nasm-pp.c. Remediation There is no fixed version for yasm. References - GitHub Gist - GitHub Issue Credit: Clingto...

DEBIAN-CVE-2017-17819

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in the function findcc in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skipwhite calls are not validated...

CVE-2017-17819

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in the function findcc in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skipwhite calls are not validated...

Netwide Assembler 'find_cc()' Function Illegal Address Access Vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A security vulnerability in the 'findcc' function in the asm/preproc.c file in NASM version 2.14rc0 stems from the program's failure to validate pointers associated with skipwhite calls. A remote...

UBUNTU-CVE-2017-17819

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in the function findcc in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skipwhite calls are not validated...