SB2018122022 - Multiple vulnerabilities in Netwide Assembler

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Out-of-bounds read (CVE-ID: CVE-2019-20352)

The vulnerability allows a remote non-authenticated attacker to #BASIC_IMPACT#.

In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free when called from expand_one_smacro in asm/preproc.c.

2) Buffer overflow (CVE-ID: CVE-2018-1000886)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This attack appear to be exploitable via a crafted nasm input file.

Remediation

Install update from vendor's website.

References

• https://bugzilla.nasm.us/show_bug.cgi?id=3392636
• https://bugzilla.nasm.us/show_bug.cgi?id=3392514