CVE-2017-17820

MEDIUM

Netwide Assembler 2.14rc0 - Use-After-Free in Macro Preprocessor

Title source: llm

Description

In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors.

References (2)

Core 2

Core References

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/3694-1/

Exploit, Issue Tracking, Third Party Advisory, VDB Entry x_refsource_misc

https://bugzilla.nasm.us/show_bug.cgi?id=3392433

Scores

CVSS v3 5.5

EPSS 0.0139

EPSS Percentile 69.1%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-416

Status published

Products (2)

canonical/ubuntu_linux 14.04

nasm/netwide_assembler 2.14 rc0

Published Dec 21, 2017

Tracked Since Feb 18, 2026