Information on source package nasm

Available versions

ReleaseVersion
jessie2.11.05-1
stretch2.12.01-1
buster2.14-1
sid2.14-1

Open issues

BugjessiestretchbustersidDescription
CVE-2018-8883vulnerable (no DSA)vulnerable (no DSA)fixedfixedNetwide Assembler (NASM) 2.13.02rc2 has a buffer over-read in the ...
CVE-2018-8882vulnerable (no DSA)vulnerable (no DSA)fixedfixedNetwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer under-read ...
CVE-2018-8881vulnerable (no DSA)vulnerable (no DSA)fixedfixedNetwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read ...
CVE-2018-19755vulnerable (no DSA)vulnerable (no DSA)vulnerablevulnerableThere is an illegal address access at asm/preproc.c (function: ...
CVE-2018-19216vulnerable (no DSA, ignored)vulnerable (no DSA)fixedfixedNetwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken ...
CVE-2018-10254vulnerable (no DSA)vulnerable (no DSA)fixedfixedNetwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the ...
CVE-2018-10016vulnerable (no DSA)vulnerable (no DSA)fixedfixedNetwide Assembler (NASM) 2.14rc0 has a division-by-zero vulnerability ...
CVE-2017-17820vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in ...
CVE-2017-17819vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access ...
CVE-2017-17818vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer ...
CVE-2017-17817vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in ...
CVE-2017-17816vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in ...
CVE-2017-17815vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access ...
CVE-2017-17814vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in ...
CVE-2017-17813vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the ...
CVE-2017-17812vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer ...
CVE-2017-17811vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer ...
CVE-2017-17810vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown ...
CVE-2017-11111vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers ...
CVE-2017-10686vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after ...

Open unimportant issues

BugjessiestretchbustersidDescription
CVE-2018-19215vulnerablevulnerablefixedfixedNetwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in ...
CVE-2018-19214vulnerablevulnerablefixedfixedNetwide Assembler (NASM) 2.14rc15 has a heap-based buffer over-read in ...
CVE-2018-19213vulnerablevulnerablevulnerablevulnerableNetwide Assembler (NASM) through 2.14rc16 has memory leaks that may ...
CVE-2018-19209vulnerablevulnerablefixedfixedNetwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in the ...
CVE-2018-16999vulnerablevulnerablefixedfixedNetwide Assembler (NASM) 2.14rc15 has an invalid memory write ...
CVE-2018-16517vulnerablevulnerablefixedfixedasm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer ...
CVE-2018-16382vulnerablevulnerablefixedfixedNetwide Assembler (NASM) 2.14rc15 has a buffer over-read in ...
CVE-2018-10316vulnerablevulnerablefixedfixedNetwide Assembler (NASM) 2.14rc0 has an endless while loop in the ...
CVE-2018-1000667vulnerablevulnerablefixedfixedNASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains ...
CVE-2017-14228vulnerablevulnerablefixedfixedIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access ...

Resolved issues

BugDescription
CVE-2008-7177Buffer overflow in the listing module in Netwide Assembler (NASM) ...
CVE-2008-2719Off-by-one error in the ppscan function (preproc.c) in Netwide ...
CVE-2005-1194Stack-based buffer overflow in the ieee_putascii function for nasm ...
CVE-2004-1287Buffer overflow in the error function in preproc.c for NASM 0.98.38 ...

Security announcements

DSA / DLADescription
DLA-1041-1nasm - security update
DSA-623-1nasm - buffer overflow

Search for package or bug name: Reporting problems