PT-2023-11597 · Nasm+1 · Nasm+1

Suhwan · Publicado 2023-08-22 · Atualizado 2024-07-05 · CVE-2020-21685

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions nasm version 2.15rc0

Description A Buffer Overflow issue in the hash findi function in hashtbl.c allows remote attackers to cause a denial of service via crafted asm files. This issue is related to the hash findi function, but no further technical details are provided.

Recommendations For nasm version 2.15rc0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2020-21685

OESA-2024-1814

Produtos afetados

Astra Linux

Nasm

Referências · 12

• 🔥 https://bugzilla.nasm.us/show_bug.cgi?id=3392644 · Exploit
• https://cve.org/CVERecord?id=CVE-2020-21685 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2020-21685 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2020-21685 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2020-21687 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-21685 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2020-21685 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2020-21686 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-21685 · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2024-1814 · Aviso do Fabricante
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1814 · Nota
• https://ubuntu.com/security/CVE-2020-21685 · Aviso do Fabricante