CVE-2018-8881

CVE-2018-8881 affects Netwide Assembler (NASM) with a heap-based buffer over-read in the tokenize function (asm/preproc.c) caused by an unterminated string. Reported as part of NASM 2.13.02rc2 and related builds; OpenVAS/Nessus entries reiterate this CVE among a broad NASM set. No public remediat...

CVE-2018-8881

Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...

CVE-2018-8881: Out-of-bounds Read

Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...

PT-2018-18687

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.13.02rc2 Description The issue is related to a heap-based buffer over-read in the tokenize function located in asm/preproc.c, which occurs due to an unterminated string. Recommendations For Netwide Assembler NA...

UBUNTU-CVE-2018-8881

Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...

DEBIAN-CVE-2017-11548

The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...

ALPINE-CVE-2017-11548

The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...

AZL-12122 CVE-2017-11548 affecting package libao 1.2.0-24

The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...

PT-2017-12091

Name of the Vulnerable Software and Affected Versions libao version 1.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption, via a crafted MP3 file. This is due to a problem in the tokenize matrix function in audio out.c. Recommendations Fo...

FreeBSD : SpamAssassin -- denial-of-service in tokenize_headers (0d3a5148-f512-11d8-9837-000c41e2cdad)

According to the SpamAssassin 2.64 release announcement : Security fix prevents a denial of service attack open to certain malformed messages; this DoS affects all SpamAssassin 2.5x and 2.6x versions to date. The issue appears to be triggered by overly long message headers. C Tenable Network...