Unscored CVE-2019-20334 EUVD-2019-10887GHSA-753j-4956-2r9q

In Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c. This potentially affects the relationships …

Published Jan 4, 2020 · Updated Aug 5, 2024 · Assigned by mitre

Package: nasm Package: nasm Ecosystem: Debian Ecosystem: Ubuntu

Description

In Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c. This potentially affects the relationships among expr0, expr1, expr2, expr3, expr4, expr5, and expr6 (and stdscan in asm/stdscan.c). This is similar to CVE-2019-6290 and CVE-2019-6291.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	nasm	No fix yet	—
Debian 13	nasm	No fix yet	—
Debian 12	nasm	No fix yet	—

Ubuntu