OESA-2021-1022

Dashboard / Vulnerabilities / OESA-2021-1022

OESA-2021-1022

Summary: nasm security update

Details: NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax. It also provides tools in RDOFF binary format, includes linker, library manager, loader, and information dump.\r\n\r\n Security Fix(es):\r\n\r\n In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free when called from expand_one_smacro in asm/preproc.c.(CVE-2019-20352)\r\n\r\n In Netwide Assembler (NASM) 2.15rc10, there is heap use-after-free in saa_wbytes in nasmlib/saa.c.(CVE-2020-24241)\r\n\r\n

References: https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1022, https://nvd.nist.gov/vuln/detail/CVE-2019-20352, https://nvd.nist.gov/vuln/detail/CVE-2020-24241