https://bugzilla.redhat.com/show_bug.cgi?id=1663907
Scott Gayou <sgayou(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20181118, |impact=low,public=20181118,
|reported=20181228,source=cv |reported=20181228,source=cv
|e,cvss3=3.3/CVSS:3.0/AV:L/A |e,cvss3=3.3/CVSS:3.0/AV:L/A
|C:L/PR:N/UI:R/S:U/C:N/I:N/A |C:L/PR:N/UI:R/S:U/C:N/I:N/A
|:L,cwe=CWE-416,fedora-all/n |:L,cwe=CWE-416,fedora-all/n
|asm=affected,rhel-5/nasm=ne |asm=affected,rhel-5/nasm=no
|w,rhel-6/nasm=new,rhel-7/na |taffected,rhel-6/nasm=wontf
|sm=new,rhel-8/nasm=new |ix,rhel-7/nasm=affected,rhe
| |l-8/nasm=affected
--- Comment #3 from Scott Gayou <sgayou(a)redhat.com> ---
Red Hat Enterprise 6 and 7 are vulnerable. Valgrind output matches upstream's
ASAN output relatively well:
```
poc:15: error: label or instruction expected at start of line
poc:16: error: attempt to define a local label before any non-local labels
poc:18: error: parser: instruction expected
poc:18: error: parser: instruction expected
poc:18: error: label or instruction expected at start of line
==12504== Invalid read of size 4
==12504== at 0x4346C5: pp_getline (preproc.c:4957)
==12504== by 0x4046E3: assemble_file.constprop.3 (nasm.c:1222)
==12504== by 0x402D02: main (nasm.c:463)
```
--
You are receiving this mail because:
You are on the CC list for the bug.