CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-6291

An issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem caused by the expr6 function making recursive calls to itself in certain scenarios involving lots of '!' or '+' or '-' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 58.1%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 4.3

References

Products affected by CVE-2019-6291

Nasm » Netwide Assembler » Version: N/A

cpe:2.3:a:nasm:netwide_assembler:-
Nasm » Netwide Assembler » Version: 0.9

cpe:2.3:a:nasm:netwide_assembler:0.9
Nasm » Netwide Assembler » Version: 0.90

cpe:2.3:a:nasm:netwide_assembler:0.90
Nasm » Netwide Assembler » Version: 0.91

cpe:2.3:a:nasm:netwide_assembler:0.91
Nasm » Netwide Assembler » Version: 0.92

cpe:2.3:a:nasm:netwide_assembler:0.92
Nasm » Netwide Assembler » Version: 0.93

cpe:2.3:a:nasm:netwide_assembler:0.93
Nasm » Netwide Assembler » Version: 0.94

cpe:2.3:a:nasm:netwide_assembler:0.94
Nasm » Netwide Assembler » Version: 0.95

cpe:2.3:a:nasm:netwide_assembler:0.95
Nasm » Netwide Assembler » Version: 0.96

cpe:2.3:a:nasm:netwide_assembler:0.96
Nasm » Netwide Assembler » Version: 0.97

cpe:2.3:a:nasm:netwide_assembler:0.97
Nasm » Netwide Assembler » Version: 0.98

cpe:2.3:a:nasm:netwide_assembler:0.98
Nasm » Netwide Assembler » Version: 0.98.03

cpe:2.3:a:nasm:netwide_assembler:0.98.03
Nasm » Netwide Assembler » Version: 0.98.06e

cpe:2.3:a:nasm:netwide_assembler:0.98.06e
Nasm » Netwide Assembler » Version: 0.98.07

cpe:2.3:a:nasm:netwide_assembler:0.98.07
Nasm » Netwide Assembler » Version: 0.98.08

cpe:2.3:a:nasm:netwide_assembler:0.98.08
Nasm » Netwide Assembler » Version: 0.98.09

cpe:2.3:a:nasm:netwide_assembler:0.98.09
Nasm » Netwide Assembler » Version: 0.98.10

cpe:2.3:a:nasm:netwide_assembler:0.98.10
Nasm » Netwide Assembler » Version: 0.98.11

cpe:2.3:a:nasm:netwide_assembler:0.98.11
Nasm » Netwide Assembler » Version: 0.98.12

cpe:2.3:a:nasm:netwide_assembler:0.98.12
Nasm » Netwide Assembler » Version: 0.98.13

cpe:2.3:a:nasm:netwide_assembler:0.98.13
Nasm » Netwide Assembler » Version: 0.98.14

cpe:2.3:a:nasm:netwide_assembler:0.98.14
Nasm » Netwide Assembler » Version: 0.98.15

cpe:2.3:a:nasm:netwide_assembler:0.98.15
Nasm » Netwide Assembler » Version: 0.98.16

cpe:2.3:a:nasm:netwide_assembler:0.98.16
Nasm » Netwide Assembler » Version: 0.98.17

cpe:2.3:a:nasm:netwide_assembler:0.98.17
Nasm » Netwide Assembler » Version: 0.98.18

cpe:2.3:a:nasm:netwide_assembler:0.98.18
Nasm » Netwide Assembler » Version: 0.98.19

cpe:2.3:a:nasm:netwide_assembler:0.98.19
Nasm » Netwide Assembler » Version: 0.98.20

cpe:2.3:a:nasm:netwide_assembler:0.98.20
Nasm » Netwide Assembler » Version: 0.98.21

cpe:2.3:a:nasm:netwide_assembler:0.98.21
Nasm » Netwide Assembler » Version: 0.98.22

cpe:2.3:a:nasm:netwide_assembler:0.98.22
Nasm » Netwide Assembler » Version: 0.98.23

cpe:2.3:a:nasm:netwide_assembler:0.98.23
Nasm » Netwide Assembler » Version: 0.98.24

cpe:2.3:a:nasm:netwide_assembler:0.98.24
Nasm » Netwide Assembler » Version: 0.98.25

cpe:2.3:a:nasm:netwide_assembler:0.98.25
Nasm » Netwide Assembler » Version: 0.98.26

cpe:2.3:a:nasm:netwide_assembler:0.98.26
Nasm » Netwide Assembler » Version: 0.98.28

cpe:2.3:a:nasm:netwide_assembler:0.98.28
Nasm » Netwide Assembler » Version: 0.98.30

cpe:2.3:a:nasm:netwide_assembler:0.98.30
Nasm » Netwide Assembler » Version: 0.98.31

cpe:2.3:a:nasm:netwide_assembler:0.98.31
Nasm » Netwide Assembler » Version: 0.98.32

cpe:2.3:a:nasm:netwide_assembler:0.98.32
Nasm » Netwide Assembler » Version: 0.98.33

cpe:2.3:a:nasm:netwide_assembler:0.98.33
Nasm » Netwide Assembler » Version: 0.98.34

cpe:2.3:a:nasm:netwide_assembler:0.98.34
Nasm » Netwide Assembler » Version: 0.98.35

cpe:2.3:a:nasm:netwide_assembler:0.98.35
Nasm » Netwide Assembler » Version: 0.98.36

cpe:2.3:a:nasm:netwide_assembler:0.98.36
Nasm » Netwide Assembler » Version: 0.98.37

cpe:2.3:a:nasm:netwide_assembler:0.98.37
Nasm » Netwide Assembler » Version: 0.98.38

cpe:2.3:a:nasm:netwide_assembler:0.98.38
Nasm » Netwide Assembler » Version: 0.98.39

cpe:2.3:a:nasm:netwide_assembler:0.98.39
Nasm » Netwide Assembler » Version: 0.99.05

cpe:2.3:a:nasm:netwide_assembler:0.99.05
Nasm » Netwide Assembler » Version: 0.99.06

cpe:2.3:a:nasm:netwide_assembler:0.99.06
Nasm » Netwide Assembler » Version: 2.00

cpe:2.3:a:nasm:netwide_assembler:2.00
Nasm » Netwide Assembler » Version: 2.00.0

cpe:2.3:a:nasm:netwide_assembler:2.00.0
Nasm » Netwide Assembler » Version: 2.01

cpe:2.3:a:nasm:netwide_assembler:2.01
Nasm » Netwide Assembler » Version: 2.01.0

cpe:2.3:a:nasm:netwide_assembler:2.01.0
Nasm » Netwide Assembler » Version: 2.02

cpe:2.3:a:nasm:netwide_assembler:2.02
Nasm » Netwide Assembler » Version: 2.02.0

cpe:2.3:a:nasm:netwide_assembler:2.02.0
Nasm » Netwide Assembler » Version: 2.03

cpe:2.3:a:nasm:netwide_assembler:2.03
Nasm » Netwide Assembler » Version: 2.03.0

cpe:2.3:a:nasm:netwide_assembler:2.03.0
Nasm » Netwide Assembler » Version: 2.03.01

cpe:2.3:a:nasm:netwide_assembler:2.03.01
Nasm » Netwide Assembler » Version: 2.04

cpe:2.3:a:nasm:netwide_assembler:2.04
Nasm » Netwide Assembler » Version: 2.04.0

cpe:2.3:a:nasm:netwide_assembler:2.04.0
Nasm » Netwide Assembler » Version: 2.05

cpe:2.3:a:nasm:netwide_assembler:2.05
Nasm » Netwide Assembler » Version: 2.05.0

cpe:2.3:a:nasm:netwide_assembler:2.05.0
Nasm » Netwide Assembler » Version: 2.05.01

cpe:2.3:a:nasm:netwide_assembler:2.05.01
Nasm » Netwide Assembler » Version: 2.06

cpe:2.3:a:nasm:netwide_assembler:2.06
Nasm » Netwide Assembler » Version: 2.06.0

cpe:2.3:a:nasm:netwide_assembler:2.06.0
Nasm » Netwide Assembler » Version: 2.07

cpe:2.3:a:nasm:netwide_assembler:2.07
Nasm » Netwide Assembler » Version: 2.07.0

cpe:2.3:a:nasm:netwide_assembler:2.07.0
Nasm » Netwide Assembler » Version: 2.08

cpe:2.3:a:nasm:netwide_assembler:2.08
Nasm » Netwide Assembler » Version: 2.08.0

cpe:2.3:a:nasm:netwide_assembler:2.08.0
Nasm » Netwide Assembler » Version: 2.08.01

cpe:2.3:a:nasm:netwide_assembler:2.08.01
Nasm » Netwide Assembler » Version: 2.08.02

cpe:2.3:a:nasm:netwide_assembler:2.08.02
Nasm » Netwide Assembler » Version: 2.09

cpe:2.3:a:nasm:netwide_assembler:2.09
Nasm » Netwide Assembler » Version: 2.09.0

cpe:2.3:a:nasm:netwide_assembler:2.09.0
Nasm » Netwide Assembler » Version: 2.09.01

cpe:2.3:a:nasm:netwide_assembler:2.09.01
Nasm » Netwide Assembler » Version: 2.09.02

cpe:2.3:a:nasm:netwide_assembler:2.09.02
Nasm » Netwide Assembler » Version: 2.09.03

cpe:2.3:a:nasm:netwide_assembler:2.09.03
Nasm » Netwide Assembler » Version: 2.09.04

cpe:2.3:a:nasm:netwide_assembler:2.09.04
Nasm » Netwide Assembler » Version: 2.09.05

cpe:2.3:a:nasm:netwide_assembler:2.09.05
Nasm » Netwide Assembler » Version: 2.09.06

cpe:2.3:a:nasm:netwide_assembler:2.09.06
Nasm » Netwide Assembler » Version: 2.09.07

cpe:2.3:a:nasm:netwide_assembler:2.09.07
Nasm » Netwide Assembler » Version: 2.09.08

cpe:2.3:a:nasm:netwide_assembler:2.09.08
Nasm » Netwide Assembler » Version: 2.09.09

cpe:2.3:a:nasm:netwide_assembler:2.09.09
Nasm » Netwide Assembler » Version: 2.09.10

cpe:2.3:a:nasm:netwide_assembler:2.09.10
Nasm » Netwide Assembler » Version: 2.10

cpe:2.3:a:nasm:netwide_assembler:2.10
Nasm » Netwide Assembler » Version: 2.10.0

cpe:2.3:a:nasm:netwide_assembler:2.10.0
Nasm » Netwide Assembler » Version: 2.10.01

cpe:2.3:a:nasm:netwide_assembler:2.10.01
Nasm » Netwide Assembler » Version: 2.10.02

cpe:2.3:a:nasm:netwide_assembler:2.10.02
Nasm » Netwide Assembler » Version: 2.10.03

cpe:2.3:a:nasm:netwide_assembler:2.10.03
Nasm » Netwide Assembler » Version: 2.10.04

cpe:2.3:a:nasm:netwide_assembler:2.10.04
Nasm » Netwide Assembler » Version: 2.10.05

cpe:2.3:a:nasm:netwide_assembler:2.10.05
Nasm » Netwide Assembler » Version: 2.10.06

cpe:2.3:a:nasm:netwide_assembler:2.10.06
Nasm » Netwide Assembler » Version: 2.10.07

cpe:2.3:a:nasm:netwide_assembler:2.10.07
Nasm » Netwide Assembler » Version: 2.10.08

cpe:2.3:a:nasm:netwide_assembler:2.10.08
Nasm » Netwide Assembler » Version: 2.10.09

cpe:2.3:a:nasm:netwide_assembler:2.10.09
Nasm » Netwide Assembler » Version: 2.11

cpe:2.3:a:nasm:netwide_assembler:2.11
Nasm » Netwide Assembler » Version: 2.11.0

cpe:2.3:a:nasm:netwide_assembler:2.11.0
Nasm » Netwide Assembler » Version: 2.11.01

cpe:2.3:a:nasm:netwide_assembler:2.11.01
Nasm » Netwide Assembler » Version: 2.11.02

cpe:2.3:a:nasm:netwide_assembler:2.11.02
Nasm » Netwide Assembler » Version: 2.11.03

cpe:2.3:a:nasm:netwide_assembler:2.11.03
Nasm » Netwide Assembler » Version: 2.11.04

cpe:2.3:a:nasm:netwide_assembler:2.11.04
Nasm » Netwide Assembler » Version: 2.11.05

cpe:2.3:a:nasm:netwide_assembler:2.11.05
Nasm » Netwide Assembler » Version: 2.11.06

cpe:2.3:a:nasm:netwide_assembler:2.11.06
Nasm » Netwide Assembler » Version: 2.11.07

cpe:2.3:a:nasm:netwide_assembler:2.11.07
Nasm » Netwide Assembler » Version: 2.11.08

cpe:2.3:a:nasm:netwide_assembler:2.11.08
Nasm » Netwide Assembler » Version: 2.11.09

cpe:2.3:a:nasm:netwide_assembler:2.11.09
Nasm » Netwide Assembler » Version: 2.12

cpe:2.3:a:nasm:netwide_assembler:2.12
Nasm » Netwide Assembler » Version: 2.12.0

cpe:2.3:a:nasm:netwide_assembler:2.12.0
Nasm » Netwide Assembler » Version: 2.12.01

cpe:2.3:a:nasm:netwide_assembler:2.12.01
Nasm » Netwide Assembler » Version: 2.12.02

cpe:2.3:a:nasm:netwide_assembler:2.12.02
Nasm » Netwide Assembler » Version: 2.12.03

cpe:2.3:a:nasm:netwide_assembler:2.12.03
Nasm » Netwide Assembler » Version: 2.13

cpe:2.3:a:nasm:netwide_assembler:2.13
Nasm » Netwide Assembler » Version: 2.13.0

cpe:2.3:a:nasm:netwide_assembler:2.13.0
Nasm » Netwide Assembler » Version: 2.13.01

cpe:2.3:a:nasm:netwide_assembler:2.13.01
Nasm » Netwide Assembler » Version: 2.13.02

cpe:2.3:a:nasm:netwide_assembler:2.13.02
Nasm » Netwide Assembler » Version: 2.13.03

cpe:2.3:a:nasm:netwide_assembler:2.13.03
Nasm » Netwide Assembler » Version: 2.14

cpe:2.3:a:nasm:netwide_assembler:2.14
Nasm » Netwide Assembler » Version: 2.14.0

cpe:2.3:a:nasm:netwide_assembler:2.14.0
Nasm » Netwide Assembler » Version: 2.14.01

cpe:2.3:a:nasm:netwide_assembler:2.14.01
Nasm » Netwide Assembler » Version: 2.14.02

cpe:2.3:a:nasm:netwide_assembler:2.14.02

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-6291

Products

Pricing

Contact Us