CVE-2018-8882: Buffer Overflow
First published: Tue Mar 20 2018(Updated: )
Netwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer under-read in the function ieee_shr in asm/float.c via a large shift value.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nasm Netwide Assembler | =2.13.02-rc2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-8882.
What is the severity of CVE-2018-8882?
CVE-2018-8882 has a severity rating of high.
What is the description of CVE-2018-8882?
CVE-2018-8882 is a stack-based buffer under-read vulnerability in the Netwide Assembler (NASM) version 2.13.02rc2.
How does CVE-2018-8882 impact the affected software?
CVE-2018-8882 can be exploited to cause a stack-based buffer under-read, allowing an attacker to read sensitive information or potentially execute arbitrary code.
Is there a fix available for CVE-2018-8882?
Yes, a fix for CVE-2018-8882 is available. It is recommended to update to a patched version of Netwide Assembler (NASM).
- collector/nvd-index
- agent/type
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/nasm
- canonical/nasm netwide assembler
- version/nasm netwide assembler/2.13.02-rc2