CVE-2017-17818
HighSummary
In Netwide Assembler (NASM) version 2.14rc0, there is a heap-based buffer over-read that can lead to a remote denial of service attack. This issue is related to a while loop in the paste_tokens function in asm/preproc.c.
Risk Assessment
An attacker could exploit this vulnerability to remotely disrupt service, potentially leading to system downtime.
Recommendation
It is recommended to upgrade to a newer version of NASM to mitigate this vulnerability and to monitor systems for unauthorized access attempts.
Other vulnerabilities in Netwide Assembler (NASM) 2.14rc0
See all- CVE-2017-11111High
In version 2.14rc0 of Netwide Assembler (NASM), a vulnerability in preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
- CVE-2017-10686High
In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool. These issues can lead to corrupted double-linked lists, double free or corruption, and out-of-bounds writes.
Original NVD description (English source)
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in asm/preproc.c.