CVE-2022-29654

Опубликовано: 22 авг. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file.

Ссылки

https://gcc.gnu.org/onlinedocs/gcc/Instrumentation-Options.html
Product
https://gist.github.com/naihsin/b96e2c5c2c81621b46557fd7aacd165f
Exploit
Third Party Advisory
https://www.nasm.us/pub/nasm/releasebuilds/2.15.05/
Product
https://gcc.gnu.org/onlinedocs/gcc/Instrumentation-Options.html
Product
https://gist.github.com/naihsin/b96e2c5c2c81621b46557fd7aacd165f
Exploit
Third Party Advisory
https://www.nasm.us/pub/nasm/releasebuilds/2.15.05/
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nasm:netwide_assembler:*:*:*:*:*:*:*:*

Версия до 2.15.05 (исключая)

EPSS

Процентиль: 4%

0.00018

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVE-2022-29654

CVSS3: 5.5

ubuntu

больше 2 лет назад

Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file.

CVE-2022-29654

CVSS3: 5.5

redhat

почти 4 года назад

Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file.

CVE-2022-29654

CVSS3: 5.5

debian

больше 2 лет назад

Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm ...

GHSA-xw2c-pmxf-295h

CVSS3: 5.5

github

больше 2 лет назад

Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file.

BDU:2023-05881

CVSS3: 5.5

fstec

больше 2 лет назад

Уязвимость функции quote_for_pmake (asm/nasm.c) ассемблера ассемблера Netwide Assembler (NASM), позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 4%

0.00018

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-120