Описание
NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.
A buffer over-read was found in NASM. The issue occurs when a specially crafted file is processed by NASM when using the dbg output file format, causing the application to crash and disclose a limited amount of information.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | nasm | Out of support scope | ||
| Red Hat Enterprise Linux 7 | nasm | Out of support scope |
Показывать по
Дополнительная информация
Статус:
EPSS
6.1 Medium
CVSS3
Связанные уязвимости
NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.
NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.
NASM v2.16 was discovered to contain a global buffer overflow in the c ...
NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.
Уязвимость функции dbgdbg_typevalue в файле /output/outdbg.c ассемблера Netwide Assembler (NASM), позволяющая нарушителю раскрыть защищаемую информацию или вызвать отказ в обслуживании
EPSS
6.1 Medium
CVSS3