CVE-2017-17819

Name of the Vulnerable Software and Affected Versions Netwide Assembler (NASM) version 2.14rc0

Description The issue is related to an illegal address access in the find cc() function located in asm/preproc.c. This access can lead to a remote denial of service attack. The cause is attributed to the lack of validation of pointers associated with skip white calls.

Recommendations For Netwide Assembler (NASM) version 2.14rc0, consider disabling the find cc() function as a temporary workaround until a patch is available. Restrict access to the asm/preproc.c module to minimize the risk of exploitation. Avoid using the skip white calls in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.