PT-2018-18687
CVE-2018-8881
·
تاريخ النشر
2018-03-20
·
تاريخ التحديث
2020-07-13
الوصف من
CVSS 3.1
7.3
عاليةالمقاييسAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Netwide Assembler (NASM) version 2.13.02rc2
Description
The issue is related to a heap-based buffer over-read in the
tokenize function located in asm/preproc.c, which occurs due to an unterminated string.Recommendations
For Netwide Assembler (NASM) version 2.13.02rc2, consider avoiding the use of unterminated strings in the
tokenize function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾