Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 75

Export CSV
CVE-2020-24978

nasm: double-free vulnerability in pp_tokline asm/preproc.c

In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2020-24242

nasm: segmentation fault in tok_text function in asm/preproc.c by accessing read memory

In Netwide Assembler (NASM) 2.15rc10, SEGV can be triggered in tok_text in asm/preproc.c by accessing READ memory.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2020-24241

nasm: use-after-free in saa_wbytes function in nasmlib/saa.c

In Netwide Assembler (NASM) 2.15rc10, there is heap use-after-free in saa_wbytes in nasmlib/saa.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2020-21687

nasm: stack-based buffer overflow in stdscan() in stdscan.c

Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2020-21686

nasm: stack-use-after-scope in expand_mmac_params() in preproc.c

A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2020-21685

nasm: Heap buffer overflow in hash_findi() in hashtbl.c

Buffer Overflow vulnerability in hash_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2020-21528

nasm: segmentation fault in ieee_segment() in outieee.c

A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2020-18974

nasm: buffer overflow in crc64i() nasmlib/crc64.c

Buffer Overflow in Netwide Assembler (NASM) v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the component 'nasmlib/crc64'. This issue is different than CVE-2019-7147.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2020-18780

nasm: use-after-free in new_Token() in asm/preproc.c

A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2019-8343

nasm: use-after-free in paste_tokens in asm/preproc.c

In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2019-7147

nasm: Buffer over-read in function crc64ib in crc64.c resulting in denial of service

A buffer over-read exists in the function crc64ib in crc64.c in nasmlib in Netwide Assembler (NASM) 2.14rc16. A crafted asm input can cause segmentation faults, leading to denial-of-service.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2019-6291

nasm: Recursive calls in the function expr resulting in a denial of service

An issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem caused by the expr6 function making recursive calls to itself in certain scenarios involving lots of '!' or '+' or '-' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2019-6290

nasm: Infinite recursion in eval.c causing stack exhaustion problem resulting in a denial of service

An infinite recursion issue was discovered in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem resulting from infinite recursion in the functions expr, rexp, bexpr and cexpr in certain scenarios involving lots of '{' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2019-20352

nasm: heap-based buffer over-read in set_text_free when called from expand_one_smacro in asm/preproc.c

In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free when called from expand_one_smacro in asm/preproc.c.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2019-20334

nasm: stack consumption occurs in expr# functions in asm/eval.c

In Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c. This potentially affects the relationships among expr0, expr1, expr2, expr3, expr4, expr5, and expr6 (and stdscan in asm/stdscan.c). This is similar to CVE-2019-6290 and CVE-2019-6291.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2019-14248

nasm: NULL pointer dereference in asm/pragma.c leading to Segmentation fault

In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows a NULL pointer dereference in process_pragma, search_pragma_list, and nasm_set_limit when "%pragma limit" is mishandled.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2018-8883

nasm: Buffer over-read in parse_line function in asm/parser.c

Netwide Assembler (NASM) 2.13.02rc2 has a buffer over-read in the parse_line function in asm/parser.c via uncontrolled access to nasm_reg_flags.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2018-8882

nasm: Stack buffer underflow in function ieee_shr at source file asm/float.c

Netwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer under-read in the function ieee_shr in asm/float.c via a large shift value.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler
CVE-2018-8881

nasm: Heap overflow in function tokenize in asm/preproc.c

Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string.

CVSS 3.0 · 7.3 High EPSS 1.1% KEV · Not listed
Vendors
Canonical Nasm
Products
Ubuntu Linux Netwide Assembler
CVE-2018-20538

nasm: Use-after-free at asm/preproc.c resulting in a denial of service

There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during certain finishes tests.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nasm
Products
Netwide Assembler