https://bugzilla.redhat.com/show_bug.cgi?id=1567719
Bug ID: 1567719 Summary: CVE-2018-10016 nasm: Divide-by-zero asm/eval.c:expr5() allows for crash via crafted file Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team@redhat.com Reporter: sfowler@redhat.com CC: java-sig-commits@lists.fedoraproject.org, mizdebsk@redhat.com, msimacek@redhat.com
Netwide Assembler (nasm) through version 2.14rc0 has a divide-by-zero vulnerability in the asm/eval.c:expr5() function. An attacker could exploit this to cause a crash via a crafted file.
Upstream Bug:
https://bugzilla.nasm.us/show_bug.cgi?id=3392473
https://bugzilla.redhat.com/show_bug.cgi?id=1567719
Sam Fowler sfowler@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1567721, 1567720
--- Comment #1 from Sam Fowler sfowler@redhat.com --- Created nasm tracking bugs for this issue:
Affects: fedora-all [bug 1567720]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1567720 [Bug 1567720] CVE-2018-10016 nasm: Divide-by-zero asm/eval.c:expr5() allows for crash via crafted file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1567719
Sam Fowler sfowler@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1567724
https://bugzilla.redhat.com/show_bug.cgi?id=1567719
Sam Fowler sfowler@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20180410, |impact=low,public=20180410, |reported=20180416,source=cv |reported=20180416,source=cv |e,cvss3=3.3/CVSS:3.0/AV:L/A |e,cvss3=3.3/CVSS:3.0/AV:L/A |C:L/PR:L/UI:N/S:U/C:N/I:N/A |C:L/PR:L/UI:N/S:U/C:N/I:N/A |:L,cwe=CWE-369,fedora-all/n |:L,cwe=CWE-369,fedora-all/n |asm=affected,rhel-5/nasm=ne |asm=affected,rhel-5/nasm=wo |w,rhel-6/nasm=new,rhel-7/na |ntfix,rhel-6/nasm=affected, |sm=new,rhel-8/nasm=affected |rhel-7/nasm=affected,rhel-8 | |/nasm=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1567719
Sam Fowler sfowler@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1572474, 1572473
https://bugzilla.redhat.com/show_bug.cgi?id=1567719
Sam Fowler sfowler@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |WONTFIX Last Closed| |2018-04-27 02:30:04
https://bugzilla.redhat.com/show_bug.cgi?id=1567719
Sam Fowler sfowler@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|CLOSED |NEW Resolution|WONTFIX |--- Keywords| |Reopened
https://bugzilla.redhat.com/show_bug.cgi?id=1567719
Tomas Hoger thoger@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20180410, |impact=low,public=20180410, |reported=20180416,source=cv |reported=20180416,source=cv |e,cvss3=3.3/CVSS:3.0/AV:L/A |e,cvss3=3.3/CVSS:3.0/AV:L/A |C:L/PR:L/UI:N/S:U/C:N/I:N/A |C:L/PR:L/UI:N/S:U/C:N/I:N/A |:L,cwe=CWE-369,fedora-all/n |:L,cwe=CWE-369,fedora-all/n |asm=affected,rhel-5/nasm=wo |asm=affected,rhel-5/nasm=wo |ntfix,rhel-6/nasm=affected, |ntfix,rhel-6/nasm=wontfix,r |rhel-7/nasm=affected,rhel-8 |hel-7/nasm=affected,rhel-8/ |/nasm=affected |nasm=affected
java-sig-commits@lists.fedoraproject.org