6.8
CVSSv2

CVE-2018-8881

Published: 20/03/2018 Updated: 13/07/2020
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.3 | Impact Score: 5.9 | Exploitability Score: 1.3
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

nasm netwide assembler 2.13.02

canonical ubuntu linux 14.04

Vendor Advisories

NASM could be made to crash or run programs if it opened a specially crafted file ...
Netwide Assembler (NASM) 21302rc2 has a heap-based buffer over-read in the function tokenize in asm/preprocc, related to an unterminated string ...