Skip to content

CVE-2018-19216

CVE-2018-19216

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c.

CVSS 7.8 · High · EPSS 1.1% · Fix available

Published: 2018-11-12T19:00:00.000Z
Updated: 2024-08-05T11:30:04.194Z

Stack: system

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
nasm Debian:12
Affected ranges
- ECOSYSTEM: < 2.13.02-0.1
Update to 2.13.02-0.1
nasm Debian:13
Affected ranges
- ECOSYSTEM: < 2.13.02-0.1
Update to 2.13.02-0.1
nasm Debian:14
Affected ranges
- ECOSYSTEM: < 2.13.02-0.1
Update to 2.13.02-0.1
nasm Ubuntu:16.04:LTS
Versions
- 2.11.06-1really2.11.05-1
- 2.11.08-1
- 2.11.08-1ubuntu0.1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Ubuntu:20.04:LTS
Versions
- 2.14.02-1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Ubuntu:Pro:22.04:LTS
Versions
- 2.15.05-1
- 2.15.05-1ubuntu0.1~esm1
- 2.15.05-1ubuntu0.1~esm2
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Ubuntu:Pro:24.04:LTS
Versions
- 2.16.01-1
- 2.16.01-1build1
- 2.16.01-1ubuntu0.1~esm1
- 2.16.01-1ubuntu0.1~esm2
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Ubuntu:25.10
Versions
- 2.16.03-1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Ubuntu:26.10
Versions
- 3.01-1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Ubuntu:26.04:LTS
Versions
- 2.16.03-1
- 3.01-1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published

Original sources

Check your server →