ISOMAN

CVE

CVE-2017-14228

In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service.

Severity
MEDIUM
CVSS
5.5
Published
Modified

Linked Releases

References

  1. https://bugzilla.nasm.us/show_bug.cgi?id=3392423
  2. https://security.gentoo.org/glsa/201903-19
  3. https://usn.ubuntu.com/3694-1/
  4. https://bugzilla.nasm.us/show_bug.cgi?id=3392423
  5. https://security.gentoo.org/glsa/201903-19
  6. https://usn.ubuntu.com/3694-1/