Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-44370

Опубликовано: 02 окт. 2022
Источник: redhat
CVSS3: 7.1
EPSS Низкий

Описание

NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856

A heap-based buffer overflow flaw was found in nasm's quote_for_pmake() function in asm/nasm.c file. This flaw allows a local attacker to pass a specially crafted malicious input file, causing an application to halt or crash, leading to a denial of service.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6nasmOut of support scope
Red Hat Enterprise Linux 7nasmOut of support scope

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=2193052nasm: heap buffer overflow in quote_for_pmake() in asm/nasm.c

EPSS

Процентиль: 37%
0.00445
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 3 лет назад

NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856

CVSS3: 7.8
nvd
больше 3 лет назад

NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856

CVSS3: 7.8
msrc
6 месяцев назад

NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856

CVSS3: 7.8
debian
больше 3 лет назад

NASM v2.16 was discovered to contain a heap buffer overflow in the com ...

CVSS3: 7.8
github
больше 3 лет назад

NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856

EPSS

Процентиль: 37%
0.00445
Низкий

7.1 High

CVSS3