rpm package
suse/nasm&distro=SUSE Linux Enterprise Software Development Kit 12 SP5
pkg:rpm/suse/nasm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
Vulnerabilities (12)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-17820 | Med | 5.5 | < 2.14.02-4.8.1 | 2.14.02-4.8.1 | Dec 21, 2017 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors. | |
| CVE-2017-17819 | Med | 5.5 | < 2.14.02-4.8.1 | 2.14.02-4.8.1 | Dec 21, 2017 | In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skip_white_ calls are not validated. | |
| CVE-2017-17818 | Hig | 7.5 | < 2.14.02-4.8.1 | 2.14.02-4.8.1 | Dec 21, 2017 | In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in asm/preproc.c. | |
| CVE-2017-17817 | Med | 5.5 | < 2.14.02-4.8.1 | 2.14.02-4.8.1 | Dec 21, 2017 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack. | |
| CVE-2017-17816 | Med | 5.5 | < 2.14.02-4.8.1 | 2.14.02-4.8.1 | Dec 21, 2017 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack. | |
| CVE-2017-17815 | Med | 5.5 | < 2.14.02-4.8.1 | 2.14.02-4.8.1 | Dec 21, 2017 | In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts. | |
| CVE-2017-17814 | Med | 5.5 | < 2.14.02-4.8.1 | 2.14.02-4.8.1 | Dec 21, 2017 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack. | |
| CVE-2017-17813 | Med | 5.5 | < 2.14.02-4.8.1 | 2.14.02-4.8.1 | Dec 21, 2017 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors. | |
| CVE-2017-17812 | Med | 5.5 | < 2.14.02-4.8.1 | 2.14.02-4.8.1 | Dec 21, 2017 | In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack. | |
| CVE-2017-17811 | Med | 5.5 | < 2.14.02-4.8.1 | 2.14.02-4.8.1 | Dec 21, 2017 | In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111. | |
| CVE-2017-17810 | Med | 5.5 | < 2.14.02-4.8.1 | 2.14.02-4.8.1 | Dec 21, 2017 | In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments. | |
| CVE-2017-14228 | Med | 5.5 | < 2.14.02-4.8.1 | 2.14.02-4.8.1 | Sep 9, 2017 | In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service. |
- affected < 2.14.02-4.8.1fixed 2.14.02-4.8.1
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors.
- affected < 2.14.02-4.8.1fixed 2.14.02-4.8.1
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skip_white_ calls are not validated.
- affected < 2.14.02-4.8.1fixed 2.14.02-4.8.1
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in asm/preproc.c.
- affected < 2.14.02-4.8.1fixed 2.14.02-4.8.1
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack.
- affected < 2.14.02-4.8.1fixed 2.14.02-4.8.1
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack.
- affected < 2.14.02-4.8.1fixed 2.14.02-4.8.1
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.
- affected < 2.14.02-4.8.1fixed 2.14.02-4.8.1
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack.
- affected < 2.14.02-4.8.1fixed 2.14.02-4.8.1
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors.
- affected < 2.14.02-4.8.1fixed 2.14.02-4.8.1
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack.
- affected < 2.14.02-4.8.1fixed 2.14.02-4.8.1
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111.
- affected < 2.14.02-4.8.1fixed 2.14.02-4.8.1
In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.
- affected < 2.14.02-4.8.1fixed 2.14.02-4.8.1
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service.