CVE-2017-10686: Use After Free
First published: Thu Jun 29 2017(Updated: )
In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by pp_getline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in delete_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nasm Netwide Assembler | =2.14-rc0 | |
| Canonical Ubuntu Linux | =14.04 | |
| debian/nasm | 2.15.05-1 2.16.01-1 2.16.03-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.nasm.us/show_bug.cgi?id=3392414
- https://security.gentoo.org/glsa/201903-19
- https://usn.ubuntu.com/3694-1/
- https://launchpad.net/bugs/cve/CVE-2017-10686
- https://security-tracker.debian.org/tracker/CVE-2017-10686
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10686
- https://nvd.nist.gov/vuln/detail/CVE-2017-10686
- https://ubuntu.com/security/CVE-2017-10686
Frequently Asked Questions
What is CVE-2017-10686?
CVE-2017-10686 is a vulnerability in Netwide Assembler (NASM) 2.14rc0 that allows for multiple heap use after free vulnerabilities.
How severe is CVE-2017-10686?
CVE-2017-10686 has a severity rating of 7.8 (high).
What is affected by CVE-2017-10686?
Netwide Assembler (NASM) 2.14rc0 as well as Canonical Ubuntu Linux 14.04, and specific versions of the nasm package in Ubuntu and Debian are affected by CVE-2017-10686.
How can I fix CVE-2017-10686?
To fix CVE-2017-10686, upgrade to a patched version of Netwide Assembler (NASM) or update the affected nasm package in Ubuntu or Debian.
Where can I find more information about CVE-2017-10686?
You can find more information about CVE-2017-10686 on the official bugzilla.nasm.us, security.gentoo.org, and usn.ubuntu.com websites.
- collector/nvd-index
- agent/author
- agent/last-modified-date
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/remedy
- agent/weakness
- agent/event
- agent/description
- agent/type
- agent/severity
- agent/references
- agent/tags
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- vendor/nasm
- canonical/nasm netwide assembler
- version/nasm netwide assembler/2.14-rc0
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/14.04
- package-manager/debian