CVE-2019-6291: Medium severity netwide assembler (nasm) vulnerability
Published Jan 15, 2019
·Updated
An issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem caused by the expr6 function making recursive calls to itself in certain scenarios involving lots of '!' or '+' or '-' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file.
Affected Software
1 affected component
nasm Netwide Assembler<=2.14.02
Event History
Jan 15, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·12:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-6291.
2
What is the affected software?
The affected software is Netwide Assembler (NASM) version 2.14.02.
3
How severe is this vulnerability?
This vulnerability has a severity rating of 5.5 (medium).
4
What is the Common Weakness Enumeration (CWE) for this vulnerability?
The CWE for this vulnerability is CWE-674.
5
How can remote attackers leverage this vulnerability?
Remote attackers can leverage this vulnerability to cause a stack exhaustion problem.