CVE-2017-17811

Name of the Vulnerable Software and Affected Versions Netwide Assembler (NASM) version 2.14rc0

Description The issue is a heap-based buffer overflow that can cause a remote denial of service attack. It is related to a strcpy in paste tokens in asm/preproc.c. This is similar to a previously known issue.

Recommendations For Netwide Assembler (NASM) version 2.14rc0, consider restricting access to the paste tokens function in asm/preproc.c to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.