First published: Tue Aug 22 2023(Updated: )
A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Nasm Netwide Assembler | <2.15.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2020-21686.
The severity of CVE-2020-21686 is medium.
The affected software for CVE-2020-21686 is Nasm Netwide Assembler version 2.15.04.
CVE-2020-21686 is a stack-use-after-scope issue discovered in the expand_mmac_params function in preproc.c in Nasm Netwide Assembler before version 2.15.04, which allows remote attackers to cause a denial of service via crafted asm file.
Yes, you can refer to this link for more information: [CVE-2020-21686](https://bugzilla.nasm.us/show_bug.cgi?id=3392643)