VDB

CVE-2018-16517

CVE-2018-16517 PUBLISHED CVSS 5.5 MEDIUM

asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.

EPSS 4.50% · 91.4th percentile

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
4.50%
91.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSnasm2.11.08-1, 0, *
Ubuntu:22.04:LTSnasm0, 2.15.05-1
Ubuntu:18.04:LTSnasm2.13.02-0.1, 2.13.01-2, 0
Ubuntu:24.04:LTSnasm0, 2.16.01-1, 2.16.01-1build1
Ubuntu:20.04:LTSnasm0, 2.14.02-1
Ubuntu:25.10nasm0, 2.16.03-1

Timeline

  • Sep 5, 2018 PoC Published
  • Sep 6, 2018 CVE Published
  • Apr 18, 2019 PoC Published
  • Nov 10, 2020 CVE Updated
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Oct 27, 2021 EPSS Score
  • Dec 28, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 1, 2022 EPSS Score
  • Jul 5, 2022 EPSS Score
  • Sep 7, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›