Null pointer dereference

In libnasm.a in Netwide Assembler NASM 2.14.xx, asm/pragma.c allows a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when "%pragma limit" is mishandled...

UBUNTU-CVE-2019-14248

In libnasm.a in Netwide Assembler NASM 2.14.xx, asm/pragma.c allows a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when "%pragma limit" is mishandled...

CVE-2019-14248

In libnasm.a in Netwide Assembler NASM 2.14.xx, asm/pragma.c allows a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when "%pragma limit" is mishandled...

CVE-2019-14248

Summary: CVE-2019-14248 affects Netwide Assembler (NASM) 2.14.x in the libnasm.a library. The flaw is a NULL pointer dereference in asm/pragma.c (functions: process_pragma, search_pragma_list, nasm_set_limit) when the string "%pragma limit" is mishandled. Impact (per provided metrics): CVSSv2 ind...

Netwide Assembler Code Issue Vulnerability

Netwide Assembler NASM is a Linux-based assembler. The product is capable of creating binaries and writing bootloaders. A code issue vulnerability exists in Netwide Assembler. The vulnerability stems from an improperly designed or implemented code development process for a networked system or...

PT-2019-2955 · Netwide +2 · Netwide Assembler +2

Name of the Vulnerable Software and Affected Versions: Netwide Assembler NASM versions 2.14.xx Description: The issue is related to a NULL pointer dereference in the libnasm.a component of the Netwide Assembler NASM. This can be triggered when the "%pragma limit" is mishandled, specifically in th...

CVE-2019-8343

In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c...

Design/Logic Flaw

In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c...

CVE-2019-8343

In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c...

CVE-2019-8343

In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c...

CVE-2019-8343

In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c...

DEBIAN-CVE-2019-8343

In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c...

UBUNTU-CVE-2019-8343

In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c...

CVE-2019-8343

In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c...

CVE-2019-8343

In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c...

PT-2019-18977 · Netwide +2 · Netwide Assembler +2

Name of the Vulnerable Software and Affected Versions: Netwide Assembler NASM version 2.14.02 Description: The issue is related to a use-after-free in the paste tokens function located in asm/preproc.c. This indicates a memory management problem where memory is accessed after it has been freed,...

Buffer overflow

A buffer over-read exists in the function crc64ib in crc64.c in nasmlib in Netwide Assembler NASM 2.14rc16. A crafted asm input can cause segmentation faults, leading to denial-of-service...

CVE-2019-7147

CVE-2019-7147 describes a buffer over-read in the function crc64ib in crc64.c of NASM (nasmlib) 2.14rc16. A crafted assembly input can trigger segmentation faults, causing denial of service (DoS). Connected docs confirm the vulnerable component and the DoS impact, but do not provide a patch/versi...

CVE-2019-6290

An infinite recursion issue was discovered in eval.c in Netwide Assembler NASM through 2.14.02. There is a stack exhaustion problem resulting from infinite recursion in the functions expr, rexp, bexpr and cexpr in certain scenarios involving lots of '' characters. Remote attackers could leverage...

Stack overflow

An infinite recursion issue was discovered in eval.c in Netwide Assembler NASM through 2.14.02. There is a stack exhaustion problem resulting from infinite recursion in the functions expr, rexp, bexpr and cexpr in certain scenarios involving lots of '' characters. Remote attackers could leverage...