Wind River Support Network

HomeDefectsLIN1018-2918

Fixed

LIN1018-2918 : Security Advisory - nasm - CVE-2018-16999

Created: Nov 13, 2018 Updated: Apr 1, 2019

Resolved Date: Mar 21, 2019

Found In Version: unknown

Fix Version: 10.18.44.5

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

Netwide Assembler (NASM) 2.14rc15 has an invalid memory write (segmentation fault) in expand_smacro in preproc.c, which allows attackers to cause a denial of service via a crafted input file.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16999

CVEs

CVE-2018-16999