Approved changes feed: RSS · Atom

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc15:*:*:*:*:*:*

part: a version: 2.14.0 update: rc15

VendorNasm (c0fa9fe0-21a4-531e-ae0a-4f4ca4abd5df)
ProductNetwide Assembler (792ca598-ec50-5f59-a8f8-3fe51e4d0624)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nasm purl2cpe 2026-06-01 10:11:58.897712
pkg:deb/ubuntu/nasm purl2cpe 2026-06-01 10:11:58.897714
pkg:github/netwide-assembler/nasm purl2cpe 2026-06-01 10:11:58.897716
pkg:nuget/nasm purl2cpe 2026-06-01 10:11:58.897717
pkg:rpm/fedora/nasm purl2cpe 2026-06-01 10:11:58.897719
pkg:rpm/opensuse/nasm purl2cpe 2026-06-01 10:11:58.897720

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-19209 vulnerable 2026-06-08 05:11:15.470356 Details available
Netwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in the function find_label in asm/labels.c that will lead to a DoS attack.
Published: 2018-11-12T19:00:00.000Z
Updated: 2024-08-05T11:30:04.163Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000667 vulnerable 2026-06-08 05:10:25.953200 Details available
NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handling a crafted file due to function assemble_file(inname, depend_ptr) at asm/nasm.c:482. vulnerability in function assemble_file(inname, depend_ptr) at asm/nasm.c:482. that can result in aborting/crash nasm program. This attack appear to be exploitable via a specially crafted asm file..
Published: 2018-09-06T17:00:00.000Z
Updated: 2024-08-05T12:40:47.960Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.