NASM 2.16 stack-based overflow

Summaryinfo

A vulnerability marked as critical has been reported in NASM 2.16. This impacts an unknown function. This manipulation causes stack-based overflow. The identification of this vulnerability is CVE-2023-38668. There is no exploit available.

Detailsinfo

A vulnerability has been found in NASM 2.16 (Programming Tool Software) and classified as critical. Affected by this vulnerability is an unknown code. The manipulation with an unknown input leads to a stack-based overflow vulnerability. The CWE definition for the vulnerability is CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash).

The weakness was shared 08/23/2023. The advisory is shared at bugzilla.nasm.us. This vulnerability is known as CVE-2023-38668 since 07/23/2023. Neither technical details nor an exploit are publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2023-42466). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Programming Tool Software

Name

• NASM

Version

• 2.16

License

• open-source

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion