NA
Product
Netwide Assembler
75
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 19Medium 50Low 1
Watch
Add Netwide Assembler to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1000886 | 5.5 | Dec 20 | nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash… Affected: 2.14.01rc5; 2.15 |
| CVE-2018-19755 | 5.5 | Nov 30 | There is an illegal address access at asm/preproc.c (function: is_mmacro) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service (out-of-bounds array access)… Affected: 12.14 |
| CVE-2018-19213 | 5.5 | Nov 12 | Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may lead to DoS, related to nasm_malloc in nasmlib/malloc.c Affected: 12.14 |
| CVE-2018-19209 | 5.5 | Nov 12 | Netwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in the function find_label in asm/labels.c that will lead to a DoS attack Affected: 2.14.0 |
| CVE-2018-16999 | 5.5 | Sep 13 | Netwide Assembler (NASM) 2.14rc15 has an invalid memory write (segmentation fault) in expand_smacro in preproc.c, which allows attackers to cause a denial of service via a crafted… Affected: 12.14 |
| CVE-2018-16517 | 5.5 | Sep 6 | asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file Affected: through 2.13.03; 2.14; 2.14.0; 2.14.0; 2.14.0; 2.14.0; +10 more |
| CVE-2018-1000667 | 5.5 | Sep 6 | NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handling a crafted file due to function assemble_file(inname,… Affected: through 2.14.0; 2.14.0; 2.14.0; 2.14.0; 2.14.0; 2.14.0; +10 more |
| CVE-2018-16382 | 5.5 | Sep 3 | Netwide Assembler (NASM) 2.14rc15 has a buffer over-read in x86/regflags.c Affected: 2.14 |
| CVE-2018-10316 | 5.5 | Apr 24 | Netwide Assembler (NASM) 2.14rc0 has an endless while loop in the assemble_file function of asm/nasm.c because of a globallineno integer overflow Affected: 2.14 |
| CVE-2018-10016 | 5.5 | Apr 11 | Netwide Assembler (NASM) 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file Affected: 2.14 |
| CVE-2017-17820 | 5.5 | Dec 21 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of… Affected: 2.14 |
| CVE-2017-17819 | 5.5 | Dec 21 | In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because… Affected: 2.14 |
| CVE-2017-17817 | 5.5 | Dec 21 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack Affected: 2.14 |
| CVE-2017-17816 | 5.5 | Dec 21 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack Affected: 2.14 |
| CVE-2017-17815 | 5.5 | Dec 21 | In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing… Affected: 2.14 |
| CVE-2017-17814 | 5.5 | Dec 21 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack Affected: 2.14 |
| CVE-2017-17813 | 5.5 | Dec 21 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to… Affected: 2.14 |
| CVE-2017-17812 | 5.5 | Dec 21 | In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack Affected: 2.14 |
| CVE-2017-17811 | 5.5 | Dec 21 | In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c,… Affected: 2.14 |
| CVE-2017-17810 | 5.5 | Dec 21 | In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have… Affected: 2.14 |
| CVE-2017-14228 | 5.5 | Sep 9 | In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference Affected: 2.14 |
| CVE-2020-18974 | 3.3 | Aug 25 | Buffer Overflow in Netwide Assembler (NASM) v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the component 'nasmlib/crc64' Affected: 2.15 through 2.15.05 |
| CVE-2008-7177 | – | Sep 8 | Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719 Affected: through 2.03.01 |
| CVE-2008-2719 | – | Jun 16 | Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers to cause a denial of service (crash) and possibly execute… Affected: 2.02 |
| CVE-2004-1287 | – | Jan 10 | Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than… Affected: 0.98.38 |
