SB2018041118 - Multiple vulnerabilities in Netwide Assembler

Description

This security bulletin contains information about 4 secuirty vulnerabilities.

1) Buffer overflow (CVE-ID: CVE-2019-7147)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

A buffer over-read exists in the function crc64ib in crc64.c in nasmlib in Netwide Assembler (NASM) 2.14rc16. A crafted asm input can cause segmentation faults, leading to denial-of-service.

2) Out-of-bounds read (CVE-ID: CVE-2018-16382)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to buffer over-read in x86/regflags.c. A remote attacker can perform a denial of service attack.

3) Integer overflow (CVE-ID: CVE-2018-10316)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

Netwide Assembler (NASM) 2.14rc0 has an endless while loop in the assemble_file function of asm/nasm.c because of a globallineno integer overflow.

4) Division by zero (CVE-ID: CVE-2018-10016)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

Netwide Assembler (NASM) 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file.

Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References

• https://bugzilla.nasm.us/show_bug.cgi?id=3392544
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html
• https://bugzilla.nasm.us/show_bug.cgi?id=3392503
• https://bugzilla.nasm.us/show_bug.cgi?id=3392474
• https://bugzilla.nasm.us/show_bug.cgi?id=3392473