https://bugzilla.redhat.com/show_bug.cgi?id=1732714
Bug ID: 1732714
Summary: CVE-2019-14248 nasm: NULL pointer dereference in
asm/pragma.c leading to Segmentation fault
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Whiteboard: impact=moderate,public=20190724,reported=20190724,sour
ce=cve,cvss3=7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/
I:N/A:H,cwe=CWE-476,fedora-all/nasm=affected,rhel-5/na
sm=new,rhel-6/nasm=new,rhel-7/nasm=new,rhel-8/nasm=new
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: mrehak(a)redhat.com
CC: dominik(a)greysector.net, fdc(a)fcami.net,
i.gnatenko.brain(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, nickc(a)redhat.com,
pbonzini(a)redhat.com
Target Milestone: ---
Classification: Other
In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows a NULL
pointer dereference in process_pragma, search_pragma_list, and nasm_set_limit
when "%pragma limit" is mishandled.
Upstream Issue:
https://bugzilla.nasm.us/show_bug.cgi?id=3392576
--
You are receiving this mail because:
You are on the CC list for the bug.