Bugzilla – Bug 1190019
VUL-1: CVE-2020-18974: nasm: buffer overflow in crc64i() nasmlib/crc64.c
Last modified: 2022-11-22 08:36:24 UTC
Buffer Overflow in Netwide Assembler (NASM) v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the component 'nasmlib/crc64'. This issue is different than CVE-2019-7147. Reference: https://bugzilla.nasm.us/show_bug.cgi?id=3392568 References: https://bugzilla.redhat.com/show_bug.cgi?id=1998315 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-18974 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18974 https://bugzilla.nasm.us/show_bug.cgi?id=3392568
We currently ship these packages: - SUSE:SLE-15:Update/nasm 2.14.02 - openSUSE:Factory/nasm 2.15.05 No upstream patch is available. Upstream issue and reproducer: https://bugzilla.nasm.us/show_bug.cgi?id=3392568 I couldn't reproduce the issue. Running the poc with an ASAN-enabled build of nasm produces different output: - SUSE:SLE-15:Update: heap-use-after-free - openSUSE:Factory: some memory leaks I have attached the execution log for both the openSUSE and SLE-15 package. Could you please double check?
Created attachment 852191 [details] nasm-factory.log
Created attachment 852192 [details] nasm-SLE15.log
I want to fix this bug, but I can't access the bugzilla site. Can you provide the testdata？
https://github.com/netwide-assembler/nasm/commit/8571f06061b47471a340e350fdfcd804098637d6 This commit has fixed this cve.