CVE-2018-19216

Опубликовано: 12 нояб. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html
https://bugzilla.nasm.us/show_bug.cgi?id=3392424
Exploit
Issue Tracking
Third Party Advisory
https://repo.or.cz/nasm.git/commitdiff/9b7ee09abfd426b99aa1ea81d19a3b2818eeabf9
Patch
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html
https://bugzilla.nasm.us/show_bug.cgi?id=3392424
Exploit
Issue Tracking
Third Party Advisory
https://repo.or.cz/nasm.git/commitdiff/9b7ee09abfd426b99aa1ea81d19a3b2818eeabf9
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nasm:netwide_assembler:*:*:*:*:*:*:*:*

Версия до 2.13.02 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00225

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2018-19216

CVSS3: 7.8

ubuntu

около 7 лет назад

Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c.

CVE-2018-19216

CVSS3: 3.3

redhat

больше 7 лет назад

Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c.

CVE-2018-19216

CVSS3: 7.8

debian

около 7 лет назад

Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoke ...

GHSA-w654-8m24-4h3m

CVSS3: 7.8

github

больше 3 лет назад

Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c.

openSUSE-SU-2020:0954-1

suse-cvrf

больше 5 лет назад

Security update for nasm

EPSS

Процентиль: 45%

0.00225

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416