CVE-2018-16517: Null Pointer Dereference
Published Sep 6, 2018
·Updated
asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.
Affected Software
16 affected components
nasm Netwide Assembler<=2.13.03
nasm Netwide Assembler=2.14-rc15
nasm Netwide Assembler=2.14.0-rc1
nasm Netwide Assembler=2.14.0-rc10
nasm Netwide Assembler=2.14.0-rc11
nasm Netwide Assembler=2.14.0-rc12
nasm Netwide Assembler=2.14.0-rc13
nasm Netwide Assembler=2.14.0-rc14
nasm Netwide Assembler=2.14.0-rc2
nasm Netwide Assembler=2.14.0-rc3
nasm Netwide Assembler=2.14.0-rc4
nasm Netwide Assembler=2.14.0-rc5
nasm Netwide Assembler=2.14.0-rc6
nasm Netwide Assembler=2.14.0-rc7
nasm Netwide Assembler=2.14.0-rc8
nasm Netwide Assembler=2.14.0-rc9
Event History
Sep 6, 2018
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-16517?
CVE-2018-16517 is a vulnerability in Netwide Assembler (NASM) that allows for a denial of service attack through a NULL pointer dereference.
2
How severe is CVE-2018-16517?
CVE-2018-16517 has a severity rating of 5.5 (medium).
3
What software is affected by CVE-2018-16517?
Netwide Assembler (NASM) versions 2.13.03, 2.14-rc15, and 2.14.0-rc1 to 2.14.0-rc15 are affected by CVE-2018-16517.
4
How can I exploit CVE-2018-16517?
CVE-2018-16517 can be exploited by crafting a malicious file to trigger a NULL pointer dereference and cause a denial of service.
5
Where can I find more information about CVE-2018-16517?
You can find more information about CVE-2018-16517 at the following references: [1] [2] [3].