PT-2018-9519 · Netwide Assembler+2 · Nasm+2

Situlingyun · Published 2018-09-06 · Updated 2020-07-31 · CVE-2018-1000667

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NASM versions 2.14rc15 and earlier

Description The issue is related to a memory corruption that occurs when handling a crafted file, specifically due to the function assemble file(inname, depend ptr) at asm/nasm.c:482. This can result in the NASM program crashing. The attack appears to be exploitable via a specially crafted asm file.

Recommendations For NASM versions 2.14rc15 and earlier, consider avoiding the use of the assemble file(inname, depend ptr) function until a patch is available. As a temporary workaround, restrict the handling of crafted asm files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2018-2953

CVE-2018-1000667

MGASA-2020-0303

OPENSUSE-SU-2020:0952-1

OPENSUSE-SU-2020:0954-1

OPENSUSE-SU-2020_0952-1

OPENSUSE-SU-2020_0954-1

SUSE-SU-2020:1843-1

Affected Products

Alt Linux

Nasm

Suse

References · 49

• 🔥❌ https://github.com/cyrillos/nasm/issues/3 · Exploit, Deleted
• 🔥 https://bugzilla.nasm.us/show_bug.cgi?id=3392507 · Exploit
• https://ubuntu.com/security/CVE-2018-1000667 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0954-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1000667 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0952-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2020-0303.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2018-1000667 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-1000667 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-1000667 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1000667 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0303 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000667 · Security Note