Wind River Support Network

HomeDefectsLIN6-15163

Fixed

LIN6-15163 : Security Advisory - nasm - CVE-2018-16999

Created: Nov 13, 2018 Updated: Dec 23, 2018

Resolved Date: Dec 4, 2018

Found In Version: 6.0.0.37

Fix Version: 6.0.0.38

Severity: Standard

Applicable for: Wind River Linux 6

Component/s: Userspace

Description

Netwide Assembler (NASM) 2.14rc15 has an invalid memory write (segmentation fault) in expand_smacro in preproc.c, which allows attackers to cause a denial of service via a crafted input file.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16999

Other Downloads

Wind River Linux 6.0.0.38