(https://nvd.nist.gov/vuln/detail/CVE-2019-8343): In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c. Gentoo Security Padawan (domhnall)
According to the upstream bug this should be fixed in nasm 2.16.01. Please clean up the vulnerable version 2.15.05.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9d1d1dd861423b9661e29d048de111f7d5034738 commit 9d1d1dd861423b9661e29d048de111f7d5034738 Author: Joonas Niilola <juippis@gentoo.org> AuthorDate: 2023-10-22 14:33:38 +0000 Commit: Joonas Niilola <juippis@gentoo.org> CommitDate: 2023-10-22 14:34:35 +0000 dev-lang/nasm: drop 2.15.05 Bug: https://bugs.gentoo.org/686720 Signed-off-by: Joonas Niilola <juippis@gentoo.org> dev-lang/nasm/Manifest | 1 - dev-lang/nasm/nasm-2.15.05.ebuild | 53 --------------------------------------- 2 files changed, 54 deletions(-)
> According to the upstream bug this should be fixed in nasm 2.16.01 But the bug is still open and there's no confirmation of a fix by the reporter, do we trust it?
The poc no longer triggers a use-after-free crash with asan, but none of the changes in the git log or release notes mention the upstream bug or CVE. The history of preproc.c is quite exciting to read through: https://github.com/netwide-assembler/nasm/commits/master/asm/preproc.c
> The history of preproc.c is quite exciting to read through Gross :( But I'll trust the determination of the maintainer here, then. Thanks!
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/data/glsa.git/commit/?id=9f9ee310bf6c4ebf26d43ff75e027e27f23beb80 commit 9f9ee310bf6c4ebf26d43ff75e027e27f23beb80 Author: GLSAMaker <glsamaker@gentoo.org> AuthorDate: 2023-12-22 12:11:31 +0000 Commit: Hans de Graaff <graaff@gentoo.org> CommitDate: 2023-12-22 12:11:54 +0000 [ GLSA 202312-09 ] NASM: Multiple Vulnerabilities Bug: https://bugs.gentoo.org/686720 Bug: https://bugs.gentoo.org/903755 Signed-off-by: GLSAMaker <glsamaker@gentoo.org> Signed-off-by: Hans de Graaff <graaff@gentoo.org> glsa-202312-09.xml | 45 +++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 45 insertions(+)
