CVE-2018-16517

Опубликовано: 06 сент. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/152566/Netwide-Assembler-NASM-2.14rc15-Null-Pointer-Dereference.html
Exploit
Third Party Advisory
VDB Entry
https://bugzilla.nasm.us/show_bug.cgi?id=3392513
Exploit
Issue Tracking
Third Party Advisory
https://fakhrizulkifli.github.io/CVE-2018-16517.html
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/46726/
Exploit
Third Party Advisory
VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/152566/Netwide-Assembler-NASM-2.14rc15-Null-Pointer-Dereference.html
Exploit
Third Party Advisory
VDB Entry
https://bugzilla.nasm.us/show_bug.cgi?id=3392513
Exploit
Issue Tracking
Third Party Advisory
https://fakhrizulkifli.github.io/CVE-2018-16517.html
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/46726/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:nasm:netwide_assembler:*:*:*:*:*:*:*:*

Версия до 2.13.03 (включая)

cpe:2.3:a:nasm:netwide_assembler:2.14:rc15:*:*:*:*:*:*

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc1:*:*:*:*:*:*

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc10:*:*:*:*:*:*

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc11:*:*:*:*:*:*

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc12:*:*:*:*:*:*

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc13:*:*:*:*:*:*

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc14:*:*:*:*:*:*

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc2:*:*:*:*:*:*

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc3:*:*:*:*:*:*

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc4:*:*:*:*:*:*

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc5:*:*:*:*:*:*

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc6:*:*:*:*:*:*

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc7:*:*:*:*:*:*

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc8:*:*:*:*:*:*

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc9:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.04504

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2018-16517

CVSS3: 5.5

ubuntu

около 8 лет назад

asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.

CVE-2018-16517

CVSS3: 2.5

redhat

около 8 лет назад

asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.

CVE-2018-16517

CVSS3: 5.5

debian

около 8 лет назад

asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dere ...

GHSA-v4mp-339h-9w7f

CVSS3: 5.5

github

больше 4 лет назад

asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.

ALT-PU-2018-2667

CVSS3: 5.5

altlinux

почти 8 лет назад

ALT-PU-2018-2667: package `nasm` update to version 2.14-alt1

EPSS

Процентиль: 92%

0.04504

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476