Skip to content
OpenAdvisories
Unscored RHSA-2005:381 2 CVEs

Red Hat Security Advisory: nasm security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as nasm 0:0.98.35-3.EL3
Red Hat · RHEL 3 enterprise_linux:3::as nasm-debuginfo 0:0.98.35-3.EL3
Red Hat · RHEL 3 enterprise_linux:3::desktop nasm 0:0.98.35-3.EL3
Red Hat · RHEL 3 enterprise_linux:3::desktop nasm-debuginfo 0:0.98.35-3.EL3
Red Hat · RHEL 3 enterprise_linux:3::es nasm 0:0.98.35-3.EL3
Red Hat · RHEL 3 enterprise_linux:3::es nasm-debuginfo 0:0.98.35-3.EL3
Red Hat · RHEL 3 enterprise_linux:3::ws nasm 0:0.98.35-3.EL3
Red Hat · RHEL 3 enterprise_linux:3::ws nasm-debuginfo 0:0.98.35-3.EL3
Red Hat · RHEL 4 enterprise_linux:4::as nasm 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::as nasm-debuginfo 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::as nasm-doc 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::as nasm-rdoff 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::desktop nasm 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::desktop nasm-debuginfo 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::desktop nasm-doc 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::desktop nasm-rdoff 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::es nasm 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::es nasm-debuginfo 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::es nasm-doc 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::es nasm-rdoff 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::ws nasm 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::ws nasm-debuginfo 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::ws nasm-doc 0:0.98.38-3.EL4
Red Hat · RHEL 4 enterprise_linux:4::ws nasm-rdoff 0:0.98.38-3.EL4

Vulnerabilities 2

  • Unscored —
    CVE-2004-1287 Public exploit EPSS 18%

    Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via …

    nasm Debian
  • Unscored —
    CVE-2005-1194

    Stack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows attackers to execute arbitra…

    nasm Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    http://tigger.uic.edu/~jlongs2/holes/nasm.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=143081
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=152962
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_381.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-1287
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617404
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-1287
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-1287
  • report
    https://access.redhat.com/security/cve/CVE-2005-1194
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617615
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-1194
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-1194