CVEvulnerability

CVE-2017-17814

5.5 MEDIUM Published 2017-12-21 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2017-12-21
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses: CWE-416

Description

In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack.

Affected configurations

• nasm netwide assembler 2.14 • canonical ubuntu linux 14.04

Related

Weakness · CWE (1)

CWE-416 Use After Free weakness

References

https://bugzilla.nasm.us/show_bug.cgi?id=3392430 Exploit, Issue Tracking, Vendor Advisory
https://usn.ubuntu.com/3694-1/ Third Party Advisory
https://bugzilla.nasm.us/show_bug.cgi?id=3392430 Exploit, Issue Tracking, Vendor Advisory
https://usn.ubuntu.com/3694-1/ Third Party Advisory