CVE-2018-16382: Medium severity netwide assembler (nasm) vulnerability

Published Sep 3, 2018

Updated

Netwide Assembler (NASM) 2.14rc15 has a buffer over-read in x86/regflags.c.

Affected Software

1 affected component

nasm Netwide Assembler=2.14-rc15

Event History

Sep 3, 2018

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is CVE-2018-16382?

CVE-2018-16382 is a vulnerability in Netwide Assembler (NASM) 2.14rc15 that allows for a buffer over-read in x86/regflags.c.

What is the severity of CVE-2018-16382?

CVE-2018-16382 has a severity level of medium, with a severity value of 5.5.

How does CVE-2018-16382 impact the affected software?

CVE-2018-16382 could allow an attacker to perform a buffer over-read in x86/regflags.c, potentially leading to information disclosure or denial of service.

Is there a fix available for CVE-2018-16382?

Yes, a fix for CVE-2018-16382 is available. It is recommended to update Netwide Assembler (NASM) to version 2.14rc16 or later.

Where can I find more information about CVE-2018-16382?

More information about CVE-2018-16382 can be found in the references: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html, http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html, and https://bugzilla.nasm.us/show_bug.cgi?id=3392503.