https://bugzilla.redhat.com/show_bug.cgi?id=1573298
Bug ID: 1573298 Summary: CVE-2018-10316 nasm: Endless while loop in the assemble_file function of asm/nasm.c Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team@redhat.com Reporter: psampaio@redhat.com CC: java-sig-commits@lists.fedoraproject.org, mizdebsk@redhat.com, msimacek@redhat.com
Netwide Assembler (NASM) 2.14rc0 has an endless while loop in the assemble_file function of asm/nasm.c because of a globallineno integer overflow.
SLE 11 and 12 affected.
Upstream bug:
https://bugzilla.nasm.us/show_bug.cgi?id=3392474
https://bugzilla.redhat.com/show_bug.cgi?id=1573298
Pedro Sampaio psampaio@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1573299
https://bugzilla.redhat.com/show_bug.cgi?id=1573298
Pedro Sampaio psampaio@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1573310
--- Comment #1 from Pedro Sampaio psampaio@redhat.com --- Created nasm tracking bugs for this issue:
Affects: fedora-all [bug 1573310]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1573310 [Bug 1573310] CVE-2018-10316 nasm: Endless while loop in the assemble_file function of asm/nasm.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1573298
Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20180425, |impact=low,public=20180425, |reported=20180425,source=cv |reported=20180425,source=cv |e,cvss3=3.3/CVSS:3.0/AV:L/A |e,cvss3=3.3/CVSS:3.0/AV:L/A |C:L/PR:N/UI:R/S:U/C:N/I:N/A |C:L/PR:N/UI:R/S:U/C:N/I:N/A |:L,cwe=CWE-190,fedora-all/n |:L,cwe=CWE-190,fedora-all/n |asm=affected,rhel-5/nasm=ne |asm=affected,rhel-5/nasm=wo |w,rhel-6/nasm=new,rhel-7/na |ntfix,rhel-6/nasm=affected, |sm=new |rhel-7/nasm=affected,rhel-8 | |/nasm=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1573298
Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1575494
https://bugzilla.redhat.com/show_bug.cgi?id=1573298
Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1575498, 1575497
https://bugzilla.redhat.com/show_bug.cgi?id=1573298
Tomas Hoger thoger@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20180425, |impact=low,public=20180425, |reported=20180425,source=cv |reported=20180425,source=cv |e,cvss3=3.3/CVSS:3.0/AV:L/A |e,cvss3=3.3/CVSS:3.0/AV:L/A |C:L/PR:N/UI:R/S:U/C:N/I:N/A |C:L/PR:N/UI:R/S:U/C:N/I:N/A |:L,cwe=CWE-190,fedora-all/n |:L,cwe=CWE-190,fedora-all/n |asm=affected,rhel-5/nasm=wo |asm=affected,rhel-5/nasm=wo |ntfix,rhel-6/nasm=affected, |ntfix,rhel-6/nasm=wontfix,r |rhel-7/nasm=affected,rhel-8 |hel-7/nasm=affected,rhel-8/ |/nasm=affected |nasm=affected
java-sig-commits@lists.fedoraproject.org