ALAS2023-2024-642 — Moderate: nasm security update (Amazon Linux 2023)

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-38665: Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash).

Fixed packages 6

Release	Package	Fixed in
Amazon Linux · 2023	nasm	0:2.15.05-1.amzn2023.0.6
Amazon Linux · 2023	nasm-debuginfo	0:2.15.05-1.amzn2023.0.6
Amazon Linux · 2023	nasm-debugsource	0:2.15.05-1.amzn2023.0.6
Amazon Linux · 2023	nasm-doc	0:2.15.05-1.amzn2023.0.6
Amazon Linux · 2023	nasm-rdoff	0:2.15.05-1.amzn2023.0.6
Amazon Linux · 2023	nasm-rdoff-debuginfo	0:2.15.05-1.amzn2023.0.6

Vulnerabilities 1

Unscored —

CVE-2023-38665

Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash).

nasm nasm nasm Debian Ubuntu Azure Linux

Aug 22, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-38665.html