https://bugzilla.redhat.com/show_bug.cgi?id=1790845
Bug ID: 1790845
Summary: CVE-2019-20352 nasm: heap-based buffer over-read in
set_text_free when called from expand_one_smacro in
asm/preproc.c
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: mrehak(a)redhat.com
CC: dominik(a)greysector.net, fdc(a)fcami.net,
i.gnatenko.brain(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, nickc(a)redhat.com,
pbonzini(a)redhat.com
Target Milestone: ---
Classification: Other
In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via
a crafted .asm file) in set_text_free when called from expand_one_smacro in
asm/preproc.c.
Upstream Issue:
https://bugzilla.nasm.us/show_bug.cgi?id=3392636
--
You are receiving this mail because:
You are on the CC list for the bug.