nasm 安全漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in nasm versions 2.14.03 and 2.15, which stems from a segmentation error in the ieeesegment function of outieee.c. The vulnerability is caused by a bug in the outieee.c function...

CVE-2023-38667

CVE-2023-38667 : The NASM NASM disassembly component has a stack-based buffer over-read in the disasm path affecting NASM version 2.16 (including 2.16 RCs), enabling denial of service when processing crafted input. Multiple vendors/distributions (Red Hat, OSV, NVD mirrors) corroborate the issue; ...

CVE-2023-38667

Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service...

CVE-2020-21687

CVE-2020-21687 corresponds to a buffer overflow in the scan function of nasm (stdscan.c) in version 2.15rc0. The vulnerability allows a remote attacker to cause a denial of service by processing a crafted ASM file. Public documents in connected sources consistently reference the same description ...

CVE-2023-38667

Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service...

CVE-2023-38668

Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service crash...

CVE-2023-38668

CVE-2023-38668 affects NASM up to version 2.16, with a stack-based buffer over-read in the disassembly path (disasm) that can crash the process and cause a denial of service. Documented characteristics from connected sources indicate a local attack surface with low exploit complexity; no patch/re...

CVE-2020-21528

CVE-2020-21528 is a NASM segmentation fault in ieee_segment (outieee.c) that allows denial of service via a crafted assembly file. Affected products/versions cited in connected docs include NASM 2.14.03 and 2.15. Upstream/OS advisories recommend upgrading to NASM 2.16.01 or newer to remediate (e....

PT-2023-11599 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: nasm version 2.15rc0 Description: The issue is related to a Buffer Overflow vulnerability in the scan function in stdscan.c. This vulnerability allows remote attackers to cause a denial of service via crafted asm files. Recommendations: For...

CVE-2022-29654

Buffer overflow vulnerability in quoteforpmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file...

CVE-2020-21686

CVE-2020-21686 is a stack-use-after-scope vulnerability in NASM’s preproc.c expand_mmac_params function, present in NASM releases before 2.15.04. It allows remote denial of service via a crafted ASM file. Multiple connected sources corroborate the issue and note a security update; remediation is ...

PT-2023-11593

Name of the Vulnerable Software and Affected Versions nasm versions 2.14.03 through 2.15 Description A Segmentation Fault issue in the ieee segment function in outieee.c allows remote attackers to cause a denial of service via crafted assembly files. Recommendations For nasm versions 2.14.03...

PT-2023-26540 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: nasm version 2.16 Description: A stack-based buffer over-read issue in the disasm function allows attackers to cause a denial of service. Recommendations: For nasm version 2.16, at the moment, there is no information about a newer version tha...

PT-2023-5264 · Netwide Assembler +3 · Nasm +3

Name of the Vulnerable Software and Affected Versions: nasm versions prior to 2.15.05 Description: The issue is related to a buffer overflow vulnerability in the quote for pmake function in asm/nasm.c of the Netwide Assembler NASM. This vulnerability can be exploited by attackers to cause a denia...

CVE-2020-18780

A Use After Free vulnerability in function newToken in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command...

CVE-2020-18780

A Use After Free vulnerability in function newToken in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command...

Nasm 资源管理错误漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in Nasm version 2.14.02, which stems from a post-release reuse vulnerability in the newToken function of asm/preproc.c. The vulnerability is caused by the use of the newToken functi...

CVE-2023-38665

The CVE-2023-38665 entry describes a null pointer dereference in ieee_write_file within nasm 2.16rc0, leading to denial of service (crash). Connected OpenVAS/NASL records from Huawei EulerOS advisories map this vulnerability to nasm packages in EulerOS 2.0 SP12/ SP13 and related advisories, but n...

CVE-2020-21687

Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file...

PT-2023-11598 · Nasm +2 · Nasm +2

Name of the Vulnerable Software and Affected Versions: nasm versions prior to 2.15.04 Description: A stack-use-after-scope issue was discovered in the expand mmac params function in preproc.c, allowing remote attackers to cause a denial of service via a crafted asm file. This issue affects the na...