CVE-2017-17813

MEDIUM

Netwide Assembler 2.14rc0 - Use-After-Free in pp_list_one_macro

Title source: llm

Description

In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors.

References (2)

Core 2

Core References

Exploit, Issue Tracking, Vendor Advisory x_refsource_misc

https://bugzilla.nasm.us/show_bug.cgi?id=3392429

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/3694-1/

Scores

CVSS v3 5.5

EPSS 0.0118

EPSS Percentile 64.0%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-416

Status published

Products (2)

canonical/ubuntu_linux 14.04

nasm/netwide_assembler 2.14 rc0

Published Dec 21, 2017

Tracked Since Feb 18, 2026