摘要:
nasm security update
安全等级: Medium
公告ID: KylinSec-SA-2024-3419
发布日期: 2024年7月5日
NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax. It also provides tools in RDOFF binary format, includes linker, library manager, loader, and information dump.
Security Fix(es):
Buffer Overflow vulnerability in hash_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.(CVE-2020-21685)
A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file.(CVE-2020-21686)
Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.(CVE-2020-21687)
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2020-21685 | KY3.4-5A | nasm | Fixed |
| CVE-2020-21686 | KY3.4-5A | nasm | Fixed |
| CVE-2020-21687 | KY3.4-5A | nasm | Fixed |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| nasm-help | noarch | 2.15.05-1.kb1.ky3_4 |
| nasm | x86_64 | 2.15.05-1.kb1.ky3_4 |
| nasm | aarch64 | 2.15.05-1.kb1.ky3_4 |
方法一：下载安装包进行升级安装
1、通过下载链接下载需要升级的升级包保存，如 xxx.rpm
2、通过rpm命令升级，如 rpm -Uvh xxx.rpm
方法二：通过软件源进行升级安装
1、保持能够连接上互联网
2、通过yum命令升级指定的包，如 yum install 包名
