CVE-2017-10686

7.8 HIGH
Published: June 29, 2017 Modified: May 13, 2026
View on NVD

Description

In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by pp_getline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in delete_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://bugzilla.nasm.us/show_bug.cgi?id=3392414
Source: cve@mitre.org
Exploit Issue Tracking Patch Third Party Advisory VDB Entry
https://usn.ubuntu.com/3694-1/
Source: cve@mitre.org
Third Party Advisory
https://bugzilla.nasm.us/show_bug.cgi?id=3392414
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit Issue Tracking Patch Third Party Advisory VDB Entry
https://security.gentoo.org/glsa/201903-19
Source: af854a3a-2127-422b-91ae-364da2661108
https://usn.ubuntu.com/3694-1/
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

6 reference(s) from NVD

Quick Stats

CVSS v3 Score
7.8 / 10.0
EPSS (Exploit Probability)
2.9%
85th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

nasm canonical