Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia: Moderate 2020-0303 Advisory: NASM Buffer Over-Read Vulnerability

mageia
Calendar Grey July 31, 2020
Dist Mageia Esm H88
Mageia 2020-0304 outlines security updates for multiple vulnerabilities impacting the Netcat utility, enhancing system robustness against potential exploits.
Netwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file

Summary

Netwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Remote attackers could leverage this vulnerability to cause a denial of service or possibly have unspecified other impact via a crafted ELF file (CVE-2018-10254).
Netwide Assembler (NASM) 2.14rc0 has an endless while loop in the assemble_file function of asm/nasm.c because of a globallineno integer overflow (CVE-2018-10316).
Netwide Assembler (NASM) 2.14rc15 has a buffer over-read in x86/regflags.c (CVE-2018-16382).
NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handling a crafted file due to function assemble_file(inname, depend_ptr) at asm/nasm.c:482. vulnerability in function assemble_file(inname, depend_ptr) at asm/nasm.c:482. that can result in aborting/crash nasm program. This attack appear to be exploitable via a specially crafted asm file (CVE-2018-1000667).
asm/labels.c in Netwide Assembler (N...

Read the Full Advisory

References

- https://bugs.mageia.org/show_bug.cgi?id=26916

- https://lists.suse.com/pipermail/sle-security-updates/2020-July/007073.html

- - https://www.cve.org/CVERecord?id=CVE-2018-10016

- https://www.cve.org/CVERecord?id=CVE-2018-10254

- https://www.cve.org/CVERecord?id=CVE-2018-10316

- https://www.cve.org/CVERecord?id=CVE-2018-16382

- https://www.cve.org/CVERecord?id=CVE-2018-16517

- https://www.cve.org/CVERecord?id=CVE-2018-16999

- https://www.cve.org/CVERecord?id=CVE-2018-19214

- https://www.cve.org/CVERecord?id=CVE-2018-19215

- https://www.cve.org/CVERecord?id=CVE-2018-1000667

Topics%20covered

Topics Covered

security advisory remote exploit Denial of Service buffer over-read Mageia NASM

Resolution

SRPMS

- 7/core/nasm-2.14.02-1.mga7

Publication date: 31 Jul 2020
URL: https://advisories.mageia.org/MGASA-2020-0303.html
Type: security
CVE: CVE-2018-10016, CVE-2018-10254, CVE-2018-10316, CVE-2018-16382, CVE-2018-16517, CVE-2018-16999, CVE-2018-19214, CVE-2018-19215, CVE-2018-1000667

Topics%20covered

Topics Covered

security advisory remote exploit Denial of Service buffer over-read Mageia NASM

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here