CVE-2019-6290: Medium severity nasm Netwide Assembler vulnerability
An infinite recursion issue was discovered in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem resulting from infinite recursion in the functions expr, rexp, bexpr and cexpr in certain scenarios involving lots of '{' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2019-6290.
What is the severity rating of CVE-2019-6290?
CVE-2019-6290 has a severity rating of medium.
Which software versions are affected by CVE-2019-6290?
Versions up to and including 2.14.02 of the Netwide Assembler (NASM) are affected by CVE-2019-6290.
What is the cause of the vulnerability in CVE-2019-6290?
The vulnerability in CVE-2019-6290 is caused by an infinite recursion issue in eval.c in Netwide Assembler (NASM).
Is there a fix available for CVE-2019-6290?
Yes, a fix for CVE-2019-6290 is available. Please refer to the provided reference link for more information.