Skip to content
OpenAdvisories
Unscored USN-3694-1 15 CVEs

nasm vulnerabilities

Published Jun 28, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that NASM incorrectly handled certain source files. If a
user or automated system were tricked into processing a specially crafted
source file, a remote attacker could use these issues to cause NASM to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS nasm 2.10.09-1ubuntu0.1

Vulnerabilities 15

  • Unscored —
    CVE-2017-10686

    In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The relat…

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2017-11111

    In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer …

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2017-14228

    In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, ak…

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2017-17810

    In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service at…

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2017-17811

    In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service a…

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2017-17812

    In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c …

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2017-17813

    In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that …

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2017-17814

    In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remot…

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2017-17815

    In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause…

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2017-17816

    In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote …

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2017-17817

    In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote d…

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2017-17818

    In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service …

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2017-17819

    In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that…

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2017-17820

    In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to …

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2018-8881

    Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, relate…

    nasm nasm Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2017-10686
  • report
    https://ubuntu.com/security/CVE-2017-11111
  • report
    https://ubuntu.com/security/CVE-2017-14228
  • report
    https://ubuntu.com/security/CVE-2017-17810
  • report
    https://ubuntu.com/security/CVE-2017-17811
  • report
    https://ubuntu.com/security/CVE-2017-17812
  • report
    https://ubuntu.com/security/CVE-2017-17813
  • report
    https://ubuntu.com/security/CVE-2017-17814
  • report
    https://ubuntu.com/security/CVE-2017-17815
  • report
    https://ubuntu.com/security/CVE-2017-17816
  • report
    https://ubuntu.com/security/CVE-2017-17817
  • report
    https://ubuntu.com/security/CVE-2017-17818
  • report
    https://ubuntu.com/security/CVE-2017-17819
  • report
    https://ubuntu.com/security/CVE-2017-17820
  • report
    https://ubuntu.com/security/CVE-2018-8881