PT-2018-14867 · Netwide+1 · Netwide Assembler+1

Publicado

2018-11-12

·

Atualizado

2020-07-31

·

CVE-2018-19214

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Netwide Assembler (NASM) version 2.14rc15
Description The issue is related to a heap-based buffer over-read in the expand mmac params function located in asm/preproc.c. This occurs due to insufficient input.
Recommendations For Netwide Assembler (NASM) version 2.14rc15, consider updating to a newer version that addresses this issue, as using insufficient input can lead to a heap-based buffer over-read in the expand mmac params function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2018-19214
MGASA-2020-0303
OPENSUSE-SU-2020:0952-1
OPENSUSE-SU-2020:0954-1
OPENSUSE-SU-2020_0952-1
OPENSUSE-SU-2020_0954-1
SUSE-SU-2020:1843-1

Produtos afetados

Netwide Assembler
Suse