CVE-2018-16517

• MGASA-2020-0303
• SUSE-SU-2020:1843-1
• openSUSE-SU-2020:0952-1
• openSUSE-SU-2020:0954-1

• 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

{
    "unresolved_ranges": [
        {
            "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc10:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "2.14.0-rc10"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc11:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "2.14.0-rc11"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc12:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "2.14.0-rc12"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc13:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "2.14.0-rc13"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc14:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "2.14.0-rc14"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc1:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "2.14.0-rc1"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc2:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "2.14.0-rc2"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc3:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "2.14.0-rc3"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc4:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "2.14.0-rc4"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc5:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "2.14.0-rc5"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc6:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "2.14.0-rc6"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc7:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "2.14.0-rc7"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc8:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "2.14.0-rc8"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc9:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "2.14.0-rc9"
                }
            ]
        }
    ]
}

• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html
• https://bugzilla.nasm.us/show_bug.cgi?id=3392513
• http://packetstormsecurity.com/files/152566/Netwide-Assembler-NASM-2.14rc15-Null-Pointer-Dereference.html
• https://fakhrizulkifli.github.io/CVE-2018-16517.html
• https://www.exploit-db.com/exploits/46726/