rpm package

opensuse/nasm&distro=openSUSE Tumbleweed

pkg:rpm/opensuse/nasm&distro=openSUSE%20Tumbleweed

Vulnerabilities (13)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2017-17820	Med	5.5	< 2.15.05-1.6	2.15.05-1.6	Dec 21, 2017	In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors.
CVE-2017-17819	Med	5.5	< 2.15.05-1.6	2.15.05-1.6	Dec 21, 2017	In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skip_white_ calls are not validated.
CVE-2017-17818	Hig	7.5	< 2.15.05-1.6	2.15.05-1.6	Dec 21, 2017	In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in asm/preproc.c.
CVE-2017-17817	Med	5.5	< 2.15.05-1.6	2.15.05-1.6	Dec 21, 2017	In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack.
CVE-2017-17816	Med	5.5	< 2.15.05-1.6	2.15.05-1.6	Dec 21, 2017	In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack.
CVE-2017-17815	Med	5.5	< 2.15.05-1.6	2.15.05-1.6	Dec 21, 2017	In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.
CVE-2017-17814	Med	5.5	< 2.15.05-1.6	2.15.05-1.6	Dec 21, 2017	In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack.
CVE-2017-17813	Med	5.5	< 2.15.05-1.6	2.15.05-1.6	Dec 21, 2017	In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors.
CVE-2017-17812	Med	5.5	< 2.15.05-1.6	2.15.05-1.6	Dec 21, 2017	In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack.
CVE-2017-17811	Med	5.5	< 2.15.05-1.6	2.15.05-1.6	Dec 21, 2017	In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111.
CVE-2017-17810	Med	5.5	< 2.15.05-1.6	2.15.05-1.6	Dec 21, 2017	In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.
CVE-2017-14228	Med	5.5	< 2.15.05-1.6	2.15.05-1.6	Sep 9, 2017	In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service.
CVE-2017-11111	Hig	7.8	< 2.15.05-1.6	2.15.05-1.6	Jul 8, 2017	In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

CVE-2017-17820MedDec 21, 2017
affected < 2.15.05-1.6fixed 2.15.05-1.6
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors.
CVE-2017-17819MedDec 21, 2017
affected < 2.15.05-1.6fixed 2.15.05-1.6
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skip_white_ calls are not validated.
CVE-2017-17818HigDec 21, 2017
affected < 2.15.05-1.6fixed 2.15.05-1.6
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in asm/preproc.c.
CVE-2017-17817MedDec 21, 2017
affected < 2.15.05-1.6fixed 2.15.05-1.6
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack.
CVE-2017-17816MedDec 21, 2017
affected < 2.15.05-1.6fixed 2.15.05-1.6
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack.
CVE-2017-17815MedDec 21, 2017
affected < 2.15.05-1.6fixed 2.15.05-1.6
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.
CVE-2017-17814MedDec 21, 2017
affected < 2.15.05-1.6fixed 2.15.05-1.6
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack.
CVE-2017-17813MedDec 21, 2017
affected < 2.15.05-1.6fixed 2.15.05-1.6
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors.
CVE-2017-17812MedDec 21, 2017
affected < 2.15.05-1.6fixed 2.15.05-1.6
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack.
CVE-2017-17811MedDec 21, 2017
affected < 2.15.05-1.6fixed 2.15.05-1.6
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111.
CVE-2017-17810MedDec 21, 2017
affected < 2.15.05-1.6fixed 2.15.05-1.6
In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.
CVE-2017-14228MedSep 9, 2017
affected < 2.15.05-1.6fixed 2.15.05-1.6
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service.
CVE-2017-11111HigJul 8, 2017
affected < 2.15.05-1.6fixed 2.15.05-1.6
In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.