CVE-2018-16517

asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.

Link	Resource
https://fakhrizulkifli.github.io/CVE-2018-16517.html	Exploit Third Party Advisory
https://bugzilla.nasm.us/show_bug.cgi?id=3392513	Exploit Issue Tracking
https://www.exploit-db.com/exploits/46726/	Exploit Third Party Advisory
http://packetstormsecurity.com/files/152566/Netwide-Assembler-NASM-2.14rc15-Null-Pointer-Dereference.html	Exploit Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html	Mailing List Third Party Advisory

Configuration 1

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc1:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc2:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc3:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc4:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc5:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc6:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc7:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc8:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc9:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc10:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc11:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc12:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc13:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc14:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:*:*:*:*:*:*:*:* cpe:2.3:a:nasm:netwide_assembler:2.14:rc15:*:*:*:*:*:*

---

Published : 2018-09-06 11:29

Updated : 2020-11-10 06:19

---

NVD link : CVE-2018-16517

Mitre link : CVE-2018-16517

Nasm

Netwide Assembler

CWE-476