Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Gentoo: GLSA 200412-20 Critical: NASM Buffer Overflow Threat

gentoo
Calendar Grey December 20, 2004
Scroller Gentoo
In December 2004, Gentoo's Security Advisory GLSA 200412-20 disclosed a serious NASM vulnerability, risking code execution and urging immediate updates for users
NASM is vulnerable to a buffer overflow that allows an attacker to execute arbitrary code through the use of a malicious object file.

Summary

Gentoo Linux Security Advisory GLSA 200412-20 https://security.gentoo.org/ Severity: Normal Title: NASM: Buffer overflow vulnerability Date: December 20, 2004 Bugs: #74477 ID: 200412-20

Synopsis ======= NASM is vulnerable to a buffer overflow that allows an attacker to execute arbitrary code through the use of a malicious object file.
Background ========= NASM is a 80x86 assembler that has been created for portability and modularity. NASM supports Pentium, P6, SSE MMX, and 3DNow extensions. It also supports a wide range of objects formats (ELF, a.out, COFF, ...), and has its own disassembler.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-lang/nasm <= 0.98.38 ...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround