PT-2018-18689

CVE-2018-8883

·

Publicado

2018-03-20

·

Atualizado

2020-07-13

Descrição por

CVSS 3.1
7.8
Alta
MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Netwide Assembler (NASM) version 2.13.02rc2
Description The issue is related to a buffer over-read in the parse line function, located in asm/parser.c. This occurs due to uncontrolled access to nasm reg flags.
Recommendations For Netwide Assembler (NASM) version 2.13.02rc2, consider restricting access to the parse line function in asm/parser.c until a patch is available. As a temporary workaround, avoid using the nasm reg flags variable in the affected function to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
OPENSUSE-SU-2020:0952-1
OPENSUSE-SU-2020_0952-1
OPENSUSE-SU-2020:0954-1
OPENSUSE-SU-2020_0954-1
SUSE-SU-2020:1843-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾