PT-2018-14866 · Netwide+1 · Netwide Assembler+1

Publicado 2018-11-12 · Atualizado 2019-10-03 · CVE-2018-19213

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Netwide Assembler (NASM) versions prior to 2.14rc17

Description The issue is related to memory leaks that may lead to Denial of Service (DoS), specifically tied to the nasm malloc function in nasmlib/malloc.c.

Recommendations For versions prior to 2.14rc17, update to version 2.14rc17 or later to resolve the memory leak issue.

Exploit

Correção

DoS

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

CVE-2018-19213

Produtos afetados

Debian

Netwide Assembler

Referências · 8

• 🔥 https://bugzilla.nasm.us/show_bug.cgi?id=3392524 · Exploit
• https://ubuntu.com/security/CVE-2018-19213 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-19213 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-19213 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2018-19213 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-19213 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-19213 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-19213 · Nota de Segurança