Buffer Overflow Vulnerability in NASM by NASM Maintainers
CVE-2020-21685

5.5MEDIUM

Key Information:

Vendor

Nasm

Status
Netwide Assembler
Vendor
CVE Published:
22 August 2023

What is CVE-2020-21685?

The hash_findi function in hashtbl.c within NASM 2.15rc0 is vulnerable to a buffer overflow. This flaw allows remote attackers to craft malicious asm files that, when processed, can lead to denial of service through unexpected application behavior. Developers and system administrators should apply the latest patches and review security protocols to mitigate potential exploits.

References

https://bugzilla.nasm.us/show_bug.cgi?id=3392644

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.