https://bugzilla.redhat.com/show_bug.cgi?id=1567719
Bug ID: 1567719 Summary: CVE-2018-10016 nasm: Divide-by-zero asm/eval.c:expr5() allows for crash via crafted file Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team@redhat.com Reporter: sfowler@redhat.com CC: java-sig-commits@lists.fedoraproject.org, mizdebsk@redhat.com, msimacek@redhat.com
Netwide Assembler (nasm) through version 2.14rc0 has a divide-by-zero vulnerability in the asm/eval.c:expr5() function. An attacker could exploit this to cause a crash via a crafted file.
Upstream Bug:
https://bugzilla.nasm.us/show_bug.cgi?id=3392473