Nasm vulnerabilities, page 3
75 vulnerabilities
Known vulnerabilities in Nasm products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
CVE-2022-29654debiannasm+2
EPSS score0.46%
Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file.CVE-2022-46457debiannasm+3EPSS score0.34%
NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.CVE-2022-46456debiannasm+3EPSS score0.36%
NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.CVE-2022-44368debiannasm+2EPSS score0.31%
NASM v2.16 was discovered to contain a null pointer deference in the NASM componentCVE-2022-44370debiannasm+2EPSS score0.45%
NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856CVE-2022-44369debiannasm+2EPSS score0.31%
NASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c.CVE-2017-11111canonicalubuntu_linux+3EPSS score1.74%
In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.CVE-2017-14228canonicalubuntu_linux+3EPSS score1.19%
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service.CVE-2017-17815canonicalubuntu_linux+3EPSS score1.44%
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.CVE-2017-17818canonicalubuntu_linux+3EPSS score2.72%
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in asm/preproc.c.CVE-2017-17811canonicalubuntu_linux+3EPSS score1.24%
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111.CVE-2017-17817canonicalubuntu_linux+3EPSS score1.40%
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack.CVE-2017-17810canonicalubuntu_linux+3EPSS score1.44%
In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.CVE-2017-17820canonicalubuntu_linux+3EPSS score1.39%
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors.CVE-2017-17816canonicalubuntu_linux+3EPSS score1.18%
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack.CVE-2017-17814canonicalubuntu_linux+3EPSS score1.18%
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack.CVE-2017-17812canonicalubuntu_linux+3EPSS score1.44%
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack.CVE-2017-17819canonicalubuntu_linux+3EPSS score1.37%
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skip_white_ calls are not validated.CVE-2017-17813canonicalubuntu_linux+3EPSS score1.18%
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors.CVE-2017-10686canonicalubuntu_linux+4EPSS score2.95%
In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by pp_getline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in delete_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack.