CVE-2018-8881 - nasm: Heap overflow in function tokenize in asm/preproc.c

HIGH

nasm: Heap overflow in function tokenize in asm/preproc.c

Published Mar 20, 2018

7.3

HIGH

CVSS 3.0

EPSS 1.09%

Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string.

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	nasm	Not affected	n/a
Red Hat Enterprise Linux 6	nasm	Fix deferred	n/a
Red Hat Enterprise Linux 7	nasm	Fix deferred	n/a
Red Hat Enterprise Linux 8	nasm	Not affected	n/a

No remediation recorded yet.

Weaknesses (2)

CWE-122

CWE-125

Out-of-bounds Read

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html		vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html		vendor-advisoryx_refsource_SUSE
https://access.redhat.com/security/cve/CVE-2018-8881		Vendor Advisory
https://bugzilla.nasm.us/show_bug.cgi?id=3392446		x_refsource_MISCIssue TrackingVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1559905		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2018-8881
https://usn.ubuntu.com/3694-1/		vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2018-8881