Approved changes feed: RSS · Atom

cpe:2.3:a:nasm:netwide_assembler:2.14:rc0:*:*:*:*:*:*

part: a version: 2.14 update: rc0

VendorNasm (c0fa9fe0-21a4-531e-ae0a-4f4ca4abd5df)
ProductNetwide Assembler (792ca598-ec50-5f59-a8f8-3fe51e4d0624)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nasm purl2cpe 2026-06-01 10:11:58.904751
pkg:deb/ubuntu/nasm purl2cpe 2026-06-01 10:11:58.904752
pkg:github/netwide-assembler/nasm purl2cpe 2026-06-01 10:11:58.904753
pkg:nuget/nasm purl2cpe 2026-06-01 10:11:58.904755
pkg:rpm/fedora/nasm purl2cpe 2026-06-01 10:11:58.904757
pkg:rpm/opensuse/nasm purl2cpe 2026-06-01 10:11:58.904758

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-10316 vulnerable 2026-06-08 05:10:26.574624 Details available
Netwide Assembler (NASM) 2.14rc0 has an endless while loop in the assemble_file function of asm/nasm.c because of a globallineno integer overflow.
Published: 2018-04-24T02:00:00.000Z
Updated: 2024-08-05T07:39:08.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10016 vulnerable 2026-06-08 05:10:26.254146 Details available
Netwide Assembler (NASM) 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file.
Published: 2018-04-11T05:00:00.000Z
Updated: 2024-08-05T07:32:01.282Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17820 vulnerable 2026-06-08 05:09:09.939384 Details available
In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors.
Published: 2017-12-21T03:00:00.000Z
Updated: 2024-08-05T20:59:17.961Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17819 vulnerable 2026-06-08 05:09:09.939078 Details available
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skip_white_ calls are not validated.
Published: 2017-12-21T03:00:00.000Z
Updated: 2024-08-05T20:59:18.008Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17818 vulnerable 2026-06-08 05:09:09.938753 Details available
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in asm/preproc.c.
Published: 2017-12-21T03:00:00.000Z
Updated: 2024-08-05T20:59:17.981Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17817 vulnerable 2026-06-08 05:09:09.938437 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17816 vulnerable 2026-06-08 05:09:09.938122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17815 vulnerable 2026-06-08 05:09:09.937815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17814 vulnerable 2026-06-08 05:09:09.937490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17813 vulnerable 2026-06-08 05:09:09.937179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17812 vulnerable 2026-06-08 05:09:09.936852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17811 vulnerable 2026-06-08 05:09:09.936495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17810 vulnerable 2026-06-08 05:09:09.936056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14228 vulnerable 2026-06-08 05:08:49.503189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11111 vulnerable 2026-06-08 05:08:36.848648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-10686 vulnerable 2026-06-08 05:08:36.221624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.