CVE-2017-11111: Buffer Overflow
First published: Sat Jul 08 2017(Updated: )
In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nasm Netwide Assembler | =2.14-rc0 | |
| Canonical Ubuntu Linux | =14.04 | |
| debian/nasm | 2.15.05-1 2.16.01-1 2.16.03-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.nasm.us/show_bug.cgi?id=3392415
- https://security.gentoo.org/glsa/201903-19
- https://usn.ubuntu.com/3694-1/
- https://launchpad.net/bugs/cve/CVE-2017-11111
- https://security-tracker.debian.org/tracker/CVE-2017-11111
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11111
- https://nvd.nist.gov/vuln/detail/CVE-2017-11111
- https://ubuntu.com/security/CVE-2017-11111
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2017-11111.
What is the severity level of CVE-2017-11111?
The severity level of CVE-2017-11111 is high (7.8).
What is the affected software?
The affected software is Netwide Assembler (NASM) version 2.14rc0.
How can this vulnerability be exploited?
This vulnerability can be exploited by remote attackers to cause a denial of service or have other unspecified impacts via a crafted file.
Are there any remedies available for this vulnerability?
Yes, for Debian, the version 2.14-1, 2.15.05-1, and 2.16.01-1 of NASM have the remedy. For Ubuntu, the version 2.13.01-2ubuntu0.1 has the remedy for Ubuntu artful. Additionally, versions 2.10.09-1ubuntu0.1 and 2.11.08-1ubuntu0.1 have the remedy for Ubuntu trusty and xenial respectively.
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- agent/author
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/description
- agent/severity
- agent/remedy
- agent/weakness
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/event
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- vendor/nasm
- canonical/nasm netwide assembler
- version/nasm netwide assembler/2.14-rc0
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/14.04
- package-manager/debian