Skip to content
OpenAdvisories
Medium ALAS2023-2023-354 1 CVE

Moderate: nasm security update (Amazon Linux 2023)

Published Sep 14, 2023 · Updated Sep 20, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2020-21528: A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2023 nasm 0:2.15.05-1.amzn2023.0.5
Amazon Linux · 2023 nasm-debuginfo 0:2.15.05-1.amzn2023.0.5
Amazon Linux · 2023 nasm-debugsource 0:2.15.05-1.amzn2023.0.5
Amazon Linux · 2023 nasm-doc 0:2.15.05-1.amzn2023.0.5
Amazon Linux · 2023 nasm-rdoff 0:2.15.05-1.amzn2023.0.5
Amazon Linux · 2023 nasm-rdoff-debuginfo 0:2.15.05-1.amzn2023.0.5

Vulnerabilities 1

  • Unscored —
    CVE-2020-21528

    A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote a…

    nasm nasm Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-21528.html