Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2020-18780

Published: 22/08/2023 Updated: 25/08/2023
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 0
Subscribe to Netwide Assembler

Vulnerability Summary

A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows malicious users to cause a denial of service via crafted nasm command.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

nasm netwide assembler 2.14.02

Vendor Advisories

Amazon Linux 2: ALAS2-2023-2277
A Use After Free vulnerability in function new_Token in asm/preprocc in nasm 21402 allows attackers to cause a denial of service via crafted nasm command (CVE-2020-18780) A Segmentation Fault issue discovered in in ieee_segment function in outieeec in nasm 21403 and 215 allows remote attackers to cause a denial of service via crafted assemb ...

References

CWE-416https://bugzilla.nasm.us/show_bug.cgi?id=3392634https://nvd.nist.govhttps://alas.aws.amazon.com/AL2/ALAS-2023-2277.html
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946CVE-2024-30309CVE-2024-4761CVE-2024-30051type confusionmemory leakCVE-2024-30293reflected XSSCVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook