https://bugzilla.redhat.com/show_bug.cgi?id=1670704
Bug ID: 1670704
Summary: CVE-2019-7147 nasm: Buffer over-read in function
crc64ib in crc64.c resulting in denial of service.
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Whiteboard: impact=moderate,public=20190101,reported=20190129,sour
ce=cve,cvss3=6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/
I:N/A:H,cwe=CWE-400,fedora-all/nasm=affected,rhel-5/na
sm=new,rhel-6/nasm=new,rhel-7/nasm=new,rhel-8/nasm=new
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: darunesh(a)redhat.com
CC: dominik(a)greysector.net,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, nickc(a)redhat.com
Target Milestone: ---
Classification: Other
A buffer over-read exists in the function crc64ib in crc64.c in nasmlib in
Netwide Assembler (NASM) 2.14rc16. A crafted asm input can cause segmentation
faults, leading to denial-of-service.
References:
https://bugzilla.nasm.us/show_bug.cgi?id=3392544
--
You are receiving this mail because:
You are on the CC list for the bug.