Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3178-1

Опубликовано: 22 июл. 2026
Источник: suse-cvrf

Описание

Security update for nasm

This update for nasm fixes the following issues

  • CVE-2026-6067: heap buffer overflow vulnerability due to a lack of bounds checking in the obj_directive() function (bsc#1261986).
  • CVE-2026-6068: heap use after free vulnerability in response file processing (bsc#1261985).

Список пакетов

SUSE Linux Enterprise Module for Development Tools 15 SP7
nasm-2.16.03-150700.3.3.1

Ссылки

Описание

A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service (crash), and arbitrary code execution.

Затронутые продукты
SUSE Linux Enterprise Module for Development Tools 15 SP7:nasm-2.16.03-150700.3.3.1
Ссылки

Описание

NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced, as the response-file buffer is freed before the pointer is used, allowing for data corruption or remote code execution.

Затронутые продукты
SUSE Linux Enterprise Module for Development Tools 15 SP7:nasm-2.16.03-150700.3.3.1
Ссылки