PT-2023-9324 · Unknown+2 · Netwide Assembler+2

·

CVE-2022-46457

·

Publicado

2023-01-04

·

Atualizado

2024-08-15

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Netwide Assembler (NASM) version 2.16
Description The issue is related to a segmentation violation in the ieee write file component at /output/outieee.c of the Netwide Assembler (NASM). This can lead to a denial of service. The problem is associated with a memory boundary read issue.
Recommendations For Netwide Assembler (NASM) version 2.16, consider updating to a newer version that addresses the segmentation violation issue in the ieee write file component. As a temporary workaround, restrict the use of the ieee write file function to minimize the risk of exploitation.

Exploit

Correção

DoS

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

AZL-12934
BDU:2024-06504
CVE-2022-46457

Produtos afetados

Debian
Netwide Assembler
Red Os