ID CVE-2017-17813
Summary In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors.
References
Vulnerable Configurations
  • cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*
    cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
CVSS
Base: 4.3 (as of 26-03-2019 - 15:44)
Impact:
Exploitability:
CWE CWE-416
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:P
refmap via4
misc https://bugzilla.nasm.us/show_bug.cgi?id=3392429
ubuntu USN-3694-1
Last major update 26-03-2019 - 15:44
Published 21-12-2017 - 03:29
Last modified 26-03-2019 - 15:44
Back to Top