Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:42997
HistoryAug 30, 2023 - 2:38 p.m.

Denial Of Service (DoS)

2023-08-3014:38:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
nasm
buffer overflow
vulnerability
dos
quote_for_pmake
application crash

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

10.5%

nasm is vulnerable to Denial Of Service (DoS). The vulnerability exists due to the buffer overflow in the quote_for_pmake function of nasm.c, which allows an attacker to cause an application crash via a maliciously crafted file.

CPENameOperatorVersion
nasm:sideq2.15.05-1
nasm:sideq2.15.05-1

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

10.5%