PT-2018-9606 · Netwide+1 · Netwide Assembler+1

Publicado

2018-04-11

·

Atualizado

2020-07-31

·

CVE-2018-10016

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Netwide Assembler (NASM) version 2.14rc0
Description: The issue is related to a division-by-zero problem in the expr5 function, located in the asm/eval.c file. This problem can be triggered by a malformed input file.
Recommendations: For Netwide Assembler (NASM) version 2.14rc0, consider avoiding the use of the expr5 function in asm/eval.c until a patch is available. As a temporary workaround, restrict the processing of malformed input files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Divide By Zero

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-369

Identificadores relacionados

CVE-2018-10016
MGASA-2020-0303
OPENSUSE-SU-2020:0952-1
OPENSUSE-SU-2020:0954-1
OPENSUSE-SU-2020_0952-1
OPENSUSE-SU-2020_0954-1
SUSE-SU-2020:1843-1

Produtos afetados

Netwide Assembler
Suse