NASM 2.16rc0 nasmlib/alloc.c nasm_calloc memory leak

Summaryinfo

A vulnerability has been found in NASM 2.16rc0 and classified as problematic. Affected is the function nasm_calloc in the library nasmlib/alloc.c. The manipulation leads to memory leak. This vulnerability is documented as CVE-2021-33450. There is not any exploit available.

Detailsinfo

A vulnerability was found in NASM 2.16rc0 (Programming Tool Software) and classified as problematic. This issue affects the function nasm_calloc in the library nasmlib/alloc.c. The manipulation with an unknown input leads to a memory leak vulnerability. Using CWE to declare the problem leads to CWE-401. The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory. Impacted is availability. The summary by CVE is:

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_calloc() in nasmlib/alloc.c.

The weakness was released 07/26/2022. The advisory is shared at bugzilla.nasm.us. The identification of this vulnerability is CVE-2021-33450 since 05/20/2021. Technical details are known, but no exploit is available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Programming Tool Software

Name

• NASM

Version

• 2.16rc0

License

• open-source

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion