Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2018-16517 — NULL Pointer Dereference in Nasm

CWE-476 — NULL Pointer Dereference8 documents7 sources
Severity
5.5MEDIUMNVD
EPSS
1.5%
top 18.78%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
3
NasmDebian NasmNasm Netwide Assembler
Timeline
PublishedSep 6
Latest updateMay 13

Description

asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶NVDnasm/netwide_assembler2.13.03+2
▶debiandebian/nasm< nasm 2.14-1 (bookworm)
▶Debiannasm/nasm< 2.14-1+3

🔴Vulnerability Details

2
GHSA
GHSA-v4mp-339h-9w7f: asm/labels↗2022-05-13
▶
OSV
CVE-2018-16517: asm/labels↗2018-09-06
▶

💥Exploits & PoCs

1
Exploit-DB
Netwide Assembler (NASM) 2.14rc15 - NULL Pointer Dereference (PoC)↗2019-04-18
▶

📋Vendor Advisories

2
Red Hat
nasm: NULL Pointer Dereference in asm/labels.c↗2018-09-05
▶
Debian
CVE-2018-16517: nasm - asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, w...↗2018
▶

💬Community

2
Bugzilla
CVE-2018-16517 nasm: NULL Pointer Dereference in asm/labels.c [fedora-all]↗2018-09-07
▶
Bugzilla
CVE-2018-16517 nasm: NULL Pointer Dereference in asm/labels.c↗2018-09-07
▶