CVE-2019-14248 - nasm: NULL pointer dereference in asm/pragma.c leading to Segmentation fault

Back Back to CVE browser

MEDIUM

nasm: NULL pointer dereference in asm/pragma.c leading to Segmentation fault

Published Jul 24, 2019

5.5

MEDIUM

CVSS 3.0

EPSS 0.92%

Description

In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows a NULL pointer dereference in process_pragma, search_pragma_list, and nasm_set_limit when "%pragma limit" is mishandled.

Affected products

Red Hat Enterprise Linux 5

nasm

Not affected
Red Hat Enterprise Linux 6

nasm

Not affected
Red Hat Enterprise Linux 7

nasm

Not affected
Red Hat Enterprise Linux 8

nasm

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	nasm	Not affected	n/a
Red Hat Enterprise Linux 6	nasm	Not affected	n/a
Red Hat Enterprise Linux 7	nasm	Not affected	n/a
Red Hat Enterprise Linux 8	nasm	Not affected	n/a

Remediation

Red Hat statement

This issue did not affect the versions of nasm as shipped with Red Hat Enterprise Linux 5, 6, 7, and 8 as they did not include support for the pragma limit feature.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (6)

https://access.redhat.com/security/cve/CVE-2019-14248
Vendor Advisory
https://bugzilla.nasm.us/show_bug.cgi?id=3392576
x_refsource_MISCExploitIssue TrackingVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1732714
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5488
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-14248
https://www.cve.org/CVERecord?id=CVE-2019-14248

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2019-14248		Vendor Advisory
https://bugzilla.nasm.us/show_bug.cgi?id=3392576		x_refsource_MISCExploitIssue TrackingVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1732714		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5488		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-14248
https://www.cve.org/CVERecord?id=CVE-2019-14248