SB2018090629 - Multiple vulnerabilities in Netwide Assembler 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2018090629

SB2018090629 - Multiple vulnerabilities in Netwide Assembler

Published: September 6, 2018 Updated: August 8, 2020

Security Bulletin ID SB2018090629
Severity
Medium
Patch available
NO
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 secuirty vulnerabilities.


1) Use-after-free (CVE-ID: CVE-2018-20535)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during a line-number increment attempt.


2) Use-after-free (CVE-ID: CVE-2018-20538)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during certain finishes tests.


3) NULL pointer dereference (CVE-ID: CVE-2018-19209)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the function find_label in asm/labels.c that will lead to a DoS attack. A remote attacker can perform a denial of service (DoS) attack.


4) Buffer overflow (CVE-ID: CVE-2018-1000667)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handling a crafted file due to function assemble_file(inname, depend_ptr) at asm/nasm.c:482. vulnerability in function assemble_file(inname, depend_ptr) at asm/nasm.c:482. that can result in aborting/crash nasm program. This attack appear to be exploitable via a specially crafted asm file..


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References