CVE-2017-11111
HighSummary
In version 2.14rc0 of Netwide Assembler (NASM), a vulnerability in preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
Risk Assessment
Organizations may experience application downtime and potential data loss due to attacks exploiting this vulnerability.
Recommendation
It is recommended to update to the latest version of NASM to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Netwide Assembler (NASM) 2.14rc0
See all- CVE-2017-17818High
In Netwide Assembler (NASM) version 2.14rc0, there is a heap-based buffer over-read that can lead to a remote denial of service attack. This issue is related to a while loop in the paste_tokens function in asm/preproc.c.
- CVE-2017-10686High
In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool. These issues can lead to corrupted double-linked lists, double free or corruption, and out-of-bounds writes.
Original NVD description (English source)
In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.