CVE-2022-29654: Buffer Overflow
Buffer overflow vulnerability in quoteforpmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/nasmto a version that resolves this vulnerability.Fixed in 2.16.01-1Fixed in 2.16.03-1Fixed in 3.01-1 - Upgrade
Upgrade
debian/nasmto a version that resolves this vulnerability.Fixed in 2.16.01-1
Event History
Frequently Asked Questions
What is CVE-2022-29654?
CVE-2022-29654 is a buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05.
How does CVE-2022-29654 affect Nasm Netwide Assembler?
CVE-2022-29654 affects Nasm Netwide Assembler before version 2.15.05.
What is the severity of CVE-2022-29654?
The severity of CVE-2022-29654 is medium with a CVSS score of 5.5.
How can CVE-2022-29654 be exploited?
CVE-2022-29654 can be exploited by attackers through a crafted file, leading to a denial of service.
How can I fix CVE-2022-29654?
To fix CVE-2022-29654, it is recommended to upgrade to Nasm Netwide Assembler version 2.15.05 or later.