Netwide Assembler up to 2.14.02 eval.c resource consumption

Summaryinfo

A vulnerability classified as problematic has been found in Netwide Assembler up to 2.14.02. Affected by this issue is some unknown functionality of the file eval.c. This manipulation causes resource consumption. This vulnerability appears as CVE-2019-6290. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability has been found in Netwide Assembler up to 2.14.02 (Programming Tool Software) and classified as problematic. Affected by this vulnerability is some unknown processing of the file eval.c. The manipulation with an unknown input leads to a resource consumption vulnerability. The CWE definition for the vulnerability is CWE-400. The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources. As an impact it is known to affect availability. The summary by CVE is:

An infinite recursion issue was discovered in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem resulting from infinite recursion in the functions expr, rexp, bexpr and cexpr in certain scenarios involving lots of '{' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file.

The bug was discovered 01/02/2019. The weakness was presented 01/15/2019 (Website). It is possible to read the advisory at bugzilla.nasm.us. This vulnerability is known as CVE-2019-6290 since 01/14/2019. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1499 according to MITRE ATT&CK.

The vulnerability was handled as a non-public zero-day exploit for at least 12 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See VDB-129164 for similar entry. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Programming Tool Software

Name

• Netwide Assembler

Version

• 2.14.02

License

• open-source

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion