CVE-2018-8881
Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости nasm
За последние 30 дней в nasm опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 15
CVE-2017-17820
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано ОбновленоCVE-2017-17819
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skip_white_ calls are not validated.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано ОбновленоCVE-2017-17818
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in asm/preproc.c.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано ОбновленоCVE-2017-17817
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано ОбновленоCVE-2017-17816
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано ОбновленоCVE-2017-17815
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано ОбновленоCVE-2017-17814
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано ОбновленоCVE-2017-17813
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано ОбновленоCVE-2017-17812
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано ОбновленоCVE-2017-17811
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано ОбновленоCVE-2017-17810
In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано ОбновленоCVE-2017-14228
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано ОбновленоCVE-2017-11111
In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано ОбновленоCVE-2017-10686
In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by pp_getline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in delete_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack.
- Обновитесь до 2.10.09-1ubuntu0.1
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.