CVE-2017-10686: Use After Free
In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by ppgetline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in deleteToken(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-10686?
CVE-2017-10686 is a vulnerability in Netwide Assembler (NASM) 2.14rc0 that allows for multiple heap use after free vulnerabilities.
How severe is CVE-2017-10686?
CVE-2017-10686 has a severity rating of 7.8 (high).
What is affected by CVE-2017-10686?
Netwide Assembler (NASM) 2.14rc0 as well as Canonical Ubuntu Linux 14.04, and specific versions of the nasm package in Ubuntu and Debian are affected by CVE-2017-10686.
How can I fix CVE-2017-10686?
To fix CVE-2017-10686, upgrade to a patched version of Netwide Assembler (NASM) or update the affected nasm package in Ubuntu or Debian.
Where can I find more information about CVE-2017-10686?
You can find more information about CVE-2017-10686 on the official bugzilla.nasm.us, security.gentoo.org, and usn.ubuntu.com websites.