Summary
Daisy Chen discovered that NASM was vulnerable to a heap buffer overflow
when handling certain input. An attacker could possibly use this issue
to cause NASM to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2023-31722)
It was discovered that NASM incorrectly handled memory allocation.
An attacker could possibly use this issue to cause NASM to use
excessive resources, leading to a denial of service. This issue
only affected Ubuntu 24.04 LTS. (CVE-2021-33452, CVE-2021-33450)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | nasm | 2.15.05-1ubuntu0.1~esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | nasm | 2.16.01-1ubuntu0.1~esm1 |
Vulnerabilities 3
-
High 7.8
There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).
-
Unscored —
An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_calloc() in nasmlib/alloc.c.
-
Unscored —
An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_malloc() in nasmlib/alloc.c.