PT-2019-2955 · Netwide+2 · Netwide Assembler+2
Ren Kimura
·
Publicado
2019-06-18
·
Atualizado
2024-12-08
·
CVE-2019-14248
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Netwide Assembler (NASM) versions 2.14.xx
Description
The issue is related to a NULL pointer dereference in the libnasm.a component of the Netwide Assembler (NASM). This can be triggered when the "%pragma limit" is mishandled, specifically in the process pragma, search pragma list, and nasm set limit functions. Exploitation of this issue may allow an attacker to cause a denial of service.
Recommendations
For Netwide Assembler (NASM) versions 2.14.xx, consider avoiding the use of the "%pragma limit" directive until a patch is available. As a temporary workaround, restrict the use of the affected functions process pragma, search pragma list, and nasm set limit to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Netwide Assembler