CVE-2017-17811

nasm: Heap-based buffer overflow in paste_tokens function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111.

CVSS 3.0 · 5.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Canonical Nasm

Products

Ubuntu Linux Netwide Assembler

CVE-2017-17812

nasm: Heap-based buffer over-read in detoken function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Canonical Nasm

Products

Ubuntu Linux Netwide Assembler

CVE-2017-17813

nasm: use-after-free in pp_list_one_macro function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Canonical Nasm

Products

Ubuntu Linux Netwide Assembler

CVE-2017-17814

nasm: use-after-free in do_directive function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Canonical Nasm

Products

Ubuntu Linux Netwide Assembler

CVE-2017-17816

nasm: Use-after-free in pp_getline function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Canonical Nasm

Products

Ubuntu Linux Netwide Assembler

CVE-2017-17817

nasm: Use-after-free in pp_verror function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Canonical Nasm

Products

Ubuntu Linux Netwide Assembler

CVE-2022-46457

nasm: segmentation fault in ieee_write_file() in output/outieee.c

NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Nasm

Products

Netwide Assembler

CVE-2022-46456

nasm: buffer overflow in dbgdbg_typevalue() in output/outdbg.c

NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Nasm

Products

Netwide Assembler

CVE-2022-44369

nasm: null pointer dereference in aout_add_gotoff_reloc() in output/outaout.c

NASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Nasm

Products

Netwide Assembler

CVE-2023-31722

nasm: heap buffer overflow in expand_mmacro() asm/preproc.c

There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Nasm

Products

Netwide Assembler

CVE-2023-38668

nasm: stack-based buffer overflow in disasm()

Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash).

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Nasm

Products

Netwide Assembler

CVE-2023-38667

nasm: stack-based buffer overflow in disasm()

Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Nasm

Products

Netwide Assembler

CVE-2023-38665

nasm: NULL pointer dereference in ieee_write_file()

Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash).

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Nasm

Products

Netwide Assembler

CVE-2022-44370

nasm: heap buffer overflow in quote_for_pmake() in asm/nasm.c

NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Nasm

Products

Netwide Assembler

CVE-2022-41420

nasm: stack-based buffer overflow in the ndisasm component

nasm v2.16 was discovered to contain a stack overflow in the Ndisasm component

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Nasm

Products

Netwide Assembler

CVE-2022-29654

nasm: heap-based buffer overflow in quote_for_pmake() in asm/nasm.c

Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Nasm

Products

Netwide Assembler

CVE-2021-45257

nasm: Infinite loop via the paste_tokens function

An infinite loop vulnerability exists in nasm 2.16rc0 via the gpaste_tokens function.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Nasm

Products

Netwide Assembler

CVE-2021-45256

nasm: Null pointer dereference via asm/preproc.c

A Null Pointer Dereference vulnerability existfs in nasm 2.16rc0 via asm/preproc.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Nasm

Products

Netwide Assembler

CVE-2021-33452

nasm: memory leak in nasm_malloc() in nasmlib/alloc.c

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_malloc() in nasmlib/alloc.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Nasm

Products

Netwide Assembler

CVE-2021-33450

nasm: memory leak in nasm_calloc() in nasmlib/alloc.c

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_calloc() in nasmlib/alloc.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Nasm

Products

Netwide Assembler