https://bugzilla.redhat.com/show_bug.cgi?id=2098590
Bug ID: 2098590 Summary: nasm: heap buffer overflow in quote_for_pmake() in asm/nasm.c Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team@redhat.com Reporter: trathi@redhat.com CC: dominik@greysector.net, java-sig-commits@lists.fedoraproject.org, mizdebsk@redhat.com, pbonzini@redhat.com Target Milestone: --- Classification: Other
A heap buffer overflow flaw was found in quote_for_pmake() in asm/nasm.c. https://bugzilla.nasm.us/show_bug.cgi?id=3392799
https://bugzilla.redhat.com/show_bug.cgi?id=2098590
TEJ RATHI trathi@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |2092560
https://bugzilla.redhat.com/show_bug.cgi?id=2098590
TEJ RATHI trathi@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2098593
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2098593 [Bug 2098593] nasm: heap buffer overflow in quote_for_pmake() in asm/nasm.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2098590
--- Comment #1 from TEJ RATHI trathi@redhat.com --- Created nasm tracking bugs for this issue:
Affects: fedora-all [bug 2098593]
https://bugzilla.redhat.com/show_bug.cgi?id=2098590
TEJ RATHI trathi@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2102043, 2102044
https://bugzilla.redhat.com/show_bug.cgi?id=2098590
Siddhesh Poyarekar sipoyare@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(trathi@redhat.com | |)
--- Comment #4 from Siddhesh Poyarekar sipoyare@redhat.com --- Nasm is not a service or a library, why is this being considered a security flaw?
https://bugzilla.redhat.com/show_bug.cgi?id=2098590
TEJ RATHI trathi@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(trathi@redhat.com | |) |
https://bugzilla.redhat.com/show_bug.cgi?id=2098590
Product Security DevOps Team prodsec-dev@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |NOTABUG Status|NEW |CLOSED Last Closed| |2022-07-02 01:25:53
https://bugzilla.redhat.com/show_bug.cgi?id=2098590 Bug 2098590 depends on bug 2098593, which changed state.
Bug 2098593 Summary: nasm: heap buffer overflow in quote_for_pmake() in asm/nasm.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2098593
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |ERRATA
https://bugzilla.redhat.com/show_bug.cgi?id=2098590
Dominik 'Rathann' Mierzejewski dominik@greysector.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2193297
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2193297 [Bug 2193297] CVE-2022-44370 nasm: heap buffer overflow in quote_for_pmake() in asm/nasm.c [fedora-38]
https://bugzilla.redhat.com/show_bug.cgi?id=2098590 Bug 2098590 depends on bug 2193297, which changed state.
Bug 2193297 Summary: CVE-2022-44370 nasm: heap buffer overflow in quote_for_pmake() in asm/nasm.c [fedora-38] https://bugzilla.redhat.com/show_bug.cgi?id=2193297
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |ERRATA
java-sig-commits@lists.fedoraproject.org