Wind River Support Network

HomeDefectsLIN1018-6614

Fixed

LIN1018-6614 : Security Advisory - nasm - CVE-2020-24241

Created: Aug 25, 2020 Updated: Sep 13, 2020

Resolved Date: Sep 6, 2020

Found In Version: 10.18.44.1

Fix Version: 10.18.44.19

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

In Netwide Assembler (NASM) 2.15rc10, there is heap use-after-free in saa_wbytes in nasmlib/saa.c.

CREATE(Triage):(User=admin) [CVE-2020-24241|https://nvd.nist.gov/vuln/detail/CVE-2020-24241]

CVEs

CVE-2020-24241