CVE-2019-6291
First published: Tue Jan 15 2019(Updated: )
An issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem caused by the expr6 function making recursive calls to itself in certain scenarios involving lots of '!' or '+' or '-' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nasm Netwide Assembler | <=2.14.02 | |
| <=2.14.02 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-6291.
What is the affected software?
The affected software is Netwide Assembler (NASM) version 2.14.02.
How severe is this vulnerability?
This vulnerability has a severity rating of 5.5 (medium).
What is the Common Weakness Enumeration (CWE) for this vulnerability?
The CWE for this vulnerability is CWE-674.
How can remote attackers leverage this vulnerability?
Remote attackers can leverage this vulnerability to cause a stack exhaustion problem.
- collector/nvd-index
- agent/type
- agent/severity
- agent/weakness
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/nasm
- canonical/nasm netwide assembler
- version/nasm netwide assembler/2.14.02