Wind River Support Network

HomeDefectsLIN9-10322

Fixed

LIN9-10322 : Security Advisory - nasm - CVE-2020-24978

Created: Sep 6, 2020 Updated: Nov 1, 2020

Resolved Date: Oct 26, 2020

Found In Version: 9.0.0.1

Fix Version: 9.0.0.26

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7.

CREATE(Triage):(User=admin) [CVE-2020-24978|https://nvd.nist.gov/vuln/detail/CVE-2020-24978]

CVEs

CVE-2020-24978