DEBIAN-CVE-2019-6291

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/DEBIAN-CVE-2019-6291

Import Source

https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2019-6291.json

JSON Data

https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2019-6291

Upstream

CVE-2019-6291

Published

2019-01-15T00:29:00Z

Modified

2025-09-18T05:19:31Z

Summary

[none]

Details

An issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem caused by the expr6 function making recursive calls to itself in certain scenarios involving lots of '!' or '+' or '-' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file.

References

https://security-tracker.debian.org/tracker/CVE-2019-6291

Affected packages

Debian:11 / nasm

Package

Name: nasm
Purl: pkg:deb/debian/nasm?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:12 / nasm

Package

Name: nasm
Purl: pkg:deb/debian/nasm?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:13 / nasm

Package

Name: nasm
Purl: pkg:deb/debian/nasm?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:14 / nasm

Package

Name: nasm
Purl: pkg:deb/debian/nasm?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "unimportant"
}