Netwide Assembler (NASM) 2.14rc0 vulnerabilities
3 known CVE vulnerabilities in Netwide Assembler (NASM) 2.14rc0, translated and rated.
- CVE-2017-17818High
In Netwide Assembler (NASM) version 2.14rc0, there is a heap-based buffer over-read that can lead to a remote denial of service attack. This issue is related to a while loop in the paste_tokens function in asm/preproc.c.
- CVE-2017-11111High
In version 2.14rc0 of Netwide Assembler (NASM), a vulnerability in preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
- CVE-2017-10686High
In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool. These issues can lead to corrupted double-linked lists, double free or corruption, and out-of-bounds writes.