Vulnerabilities > CVE-2018-16517 - NULL Pointer Dereference vulnerability in Nasm Netwide Assembler

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

nasm

CWE-476

exploit available

NVD

Published: 2018-09-06

Updated: 2020-11-10

Summary

asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.

Vulnerable Configurations

Part	Description	Count
Application	Nasm Nasm Netwide Assembler 2.14.0 Nasm Netwide Assembler - Nasm Netwide Assembler 0.9 Nasm Netwide Assembler 0.90 Nasm Netwide Assembler 0.91 Nasm Netwide Assembler 0.92 Nasm Netwide Assembler 0.93 Nasm Netwide Assembler 0.94 Nasm Netwide Assembler 0.95 Nasm Netwide Assembler 0.96 Nasm Netwide Assembler 0.97 Nasm Netwide Assembler 0.98 Nasm Netwide Assembler 0.98.03 Nasm Netwide Assembler 0.98.06E Nasm Netwide Assembler 0.98.07 Nasm Netwide Assembler 0.98.08 Nasm Netwide Assembler 0.98.09 Nasm Netwide Assembler 0.98.10 Nasm Netwide Assembler 0.98.11 Nasm Netwide Assembler 0.98.12 Nasm Netwide Assembler 0.98.13 Nasm Netwide Assembler 0.98.14 Nasm Netwide Assembler 0.98.15 Nasm Netwide Assembler 0.98.16 Nasm Netwide Assembler 0.98.17 Nasm Netwide Assembler 0.98.18 Nasm Netwide Assembler 0.98.19 Nasm Netwide Assembler 0.98.20 Nasm Netwide Assembler 0.98.21 Nasm Netwide Assembler 0.98.22 Nasm Netwide Assembler 0.98.23 Nasm Netwide Assembler 0.98.24 Nasm Netwide Assembler 0.98.25 Nasm Netwide Assembler 0.98.26 Nasm Netwide Assembler 0.98.28 Nasm Netwide Assembler 0.98.30 Nasm Netwide Assembler 0.98.31 Nasm Netwide Assembler 0.98.32 Nasm Netwide Assembler 0.98.33 Nasm Netwide Assembler 0.98.34 Nasm Netwide Assembler 0.98.35 Nasm Netwide Assembler 0.98.36 Nasm Netwide Assembler 0.98.37 Nasm Netwide Assembler 0.98.38 Nasm Netwide Assembler 0.98.39 Nasm Netwide Assembler 0.99.05 Nasm Netwide Assembler 0.99.06 Nasm Netwide Assembler 2.00 Nasm Netwide Assembler 2.00.0 Nasm Netwide Assembler 2.01 Nasm Netwide Assembler 2.01.0 Nasm Netwide Assembler 2.02 Nasm Netwide Assembler 2.02.0 Nasm Netwide Assembler 2.03 Nasm Netwide Assembler 2.03.0 Nasm Netwide Assembler 2.03.01 Nasm Netwide Assembler 2.04 Nasm Netwide Assembler 2.04.0 Nasm Netwide Assembler 2.05 Nasm Netwide Assembler 2.05.0 Nasm Netwide Assembler 2.05.01 Nasm Netwide Assembler 2.06 Nasm Netwide Assembler 2.06.0 Nasm Netwide Assembler 2.07 Nasm Netwide Assembler 2.07.0 Nasm Netwide Assembler 2.08 Nasm Netwide Assembler 2.08.0 Nasm Netwide Assembler 2.08.01 Nasm Netwide Assembler 2.08.02 Nasm Netwide Assembler 2.09 Nasm Netwide Assembler 2.09.0 Nasm Netwide Assembler 2.09.01 Nasm Netwide Assembler 2.09.02 Nasm Netwide Assembler 2.09.03 Nasm Netwide Assembler 2.09.04 Nasm Netwide Assembler 2.09.05 Nasm Netwide Assembler 2.09.06 Nasm Netwide Assembler 2.09.07 Nasm Netwide Assembler 2.09.08 Nasm Netwide Assembler 2.09.09 Nasm Netwide Assembler 2.09.10 Nasm Netwide Assembler 2.10 Nasm Netwide Assembler 2.10.0 Nasm Netwide Assembler 2.10.01 Nasm Netwide Assembler 2.10.02 Nasm Netwide Assembler 2.10.03 Nasm Netwide Assembler 2.10.04 Nasm Netwide Assembler 2.10.05 Nasm Netwide Assembler 2.10.06 Nasm Netwide Assembler 2.10.07 Nasm Netwide Assembler 2.10.08 Nasm Netwide Assembler 2.10.09 Nasm Netwide Assembler 2.11 Nasm Netwide Assembler 2.11.0 Nasm Netwide Assembler 2.11.01 Nasm Netwide Assembler 2.11.02 Nasm Netwide Assembler 2.11.03 Nasm Netwide Assembler 2.11.04 Nasm Netwide Assembler 2.11.05 Nasm Netwide Assembler 2.11.06 Nasm Netwide Assembler 2.11.07 Nasm Netwide Assembler 2.11.08 Nasm Netwide Assembler 2.11.09 Nasm Netwide Assembler 2.12 Nasm Netwide Assembler 2.12.0 Nasm Netwide Assembler 2.12.01 Nasm Netwide Assembler 2.12.02 Nasm Netwide Assembler 2.12.03 Nasm Netwide Assembler 2.13 Nasm Netwide Assembler 2.13.0 Nasm Netwide Assembler 2.13.01 Nasm Netwide Assembler 2.13.02 Nasm Netwide Assembler 2.13.03 Nasm Netwide Assembler 2.14	358

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Exploit-Db

file	exploits/multiple/dos/46726.txt
id	EDB-ID:46726
last seen	2019-04-18
modified	2019-04-18
platform	multiple
port
published	2019-04-18
reporter	Exploit-DB
source	https://www.exploit-db.com/download/46726
title	Netwide Assembler (NASM) 2.14rc15 - NULL Pointer Dereference (PoC)
type	dos

Packetstorm

data source	https://packetstormsecurity.com/files/download/152566/netwideassembler214rc15-poc.txt
id	PACKETSTORM:152566
last seen	2019-04-19
published	2019-04-18
reporter	Fakhri Zulkifli
source	https://packetstormsecurity.com/files/152566/Netwide-Assembler-NASM-2.14rc15-Null-Pointer-Dereference.html
title	Netwide Assembler (NASM) 2.14rc15 Null Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Exploit-Db

Packetstorm

References