PT-2018-18689
CVE-2018-8883
·
Publicado
2018-03-20
·
Atualizado
2020-07-13
Descrição por
CVSS 3.1
7.8
AltaMétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Netwide Assembler (NASM) version 2.13.02rc2
Description
The issue is related to a buffer over-read in the parse line function, located in asm/parser.c. This occurs due to uncontrolled access to
nasm reg flags.Recommendations
For Netwide Assembler (NASM) version 2.13.02rc2, consider restricting access to the parse line function in asm/parser.c until a patch is available. As a temporary workaround, avoid using the
nasm reg flags variable in the affected function to minimize the risk of exploitation.Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾