CVE-2017-17818

Description

In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in asm/preproc.c.

Weakness classification

• CWE-125: Out-of-bounds Read

Primary references

• cve@mitre.org — Exploit, Issue Tracking, Third Party Advisory, VDB Entry
• cve@mitre.org — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory