Groups > linux.debian.bugs.dist > #916075

Bug#907866: nasm: CVE-2018-16382

From	Salvatore Bonaccorso <carnil@debian.org>
Newsgroups	linux.debian.bugs.dist
Subject	Bug#907866: nasm: CVE-2018-16382
Date	2018-09-03 14:00 +0200
Message-ID	<wtVGr-5XT-9@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Source: nasm
Version: 2.13.03-2
Severity: important
Tags: security upstream
Forwarded: https://bugzilla.nasm.us/show_bug.cgi?id=3392503

Hi,

The following vulnerability was published for nasm.

CVE-2018-16382[0]:
| Netwide Assembler (NASM) 2.14rc15 has a buffer over-read in
| x86/regflags.c.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2018-16382
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16382
[1] https://bugzilla.nasm.us/show_bug.cgi?id=3392503

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Back to linux.debian.bugs.dist | Previous | Next | Find similar | Unroll thread

Thread

Bug#907866: nasm: CVE-2018-16382 Salvatore Bonaccorso <carnil@debian.org> - 2018-09-03 14:00 +0200

csiph-web