CVE-2020-18974

    Dashboard / Vulnerabilities / CVE-2020-18974

    CVE-2020-18974

    Published: 25 Aug 2021Last Modified: 8 Sept 2026

    Summary:

    Details: Buffer Overflow in Netwide Assembler (NASM) v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the component 'nasmlib/crc64'. This issue is different than CVE-2019-7147.

    References: https://bugzilla.nasm.us/show_bug.cgi?id=3392568

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- a825b33423d5046dfc4c0992c3ebfea5b8a531c4
    Fixed -None

    Affected versions

    nasm-2.15.05
    nasm-2.15.05rc2
    nasm-2.15.05rc1
    nasm-2.15.04
    nasm-2.15.04rc6
    nasm-2.15.04rc5
    nasm-2.15.04rc4
    nasm-2.15.04rc3
    nasm-2.15.04rc2
    nasm-2.15.04rc1
    nasm-2.15.03
    nasm-2.15.03rc8
    nasm-2.15.03rc7
    nasm-2.15.03rc6
    nasm-2.15.03rc5
    nasm-2.15.03rc4
    nasm-2.15.03rc3
    nasm-2.15.03rc2
    nasm-2.15.03rc1
    nasm-2.15.02
    nasm-2.15.02rc2
    nasm-2.15.02rc1
    nasm-2.15.01
    nasm-2.15

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2020-18974 | CVE-DB