OPENSUSE-SU-2024:11075-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 20:10
Summary
nasm-2.15.05-1.6 on GA media
Severity
Moderate
Notes
Title of the patch: nasm-2.15.05-1.6 on GA media
Description of the patch: These are all security issues fixed in the nasm-2.15.05-1.6 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-11075
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2017-11111
4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64 —
Vendor Fix
Threats
Impact low
CVE-2017-14228
5.3 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
Recommended 4 products, the same list as for CVE-2017-11111
Threats
Impact moderate
CVE-2017-17810
3.3 (Low)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2017-11111
Threats
Impact moderate
CVE-2017-17811
3.3 (Low)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2017-11111
Threats
Impact low
CVE-2017-17812
3.3 (Low)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2017-11111
Threats
Impact low
CVE-2017-17813
5.3 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
Recommended 4 products, the same list as for CVE-2017-11111
Threats
Impact low
CVE-2017-17814
5.3 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
Recommended 4 products, the same list as for CVE-2017-11111
Threats
Impact low
CVE-2017-17815
3.3 (Low)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2017-11111
Threats
Impact low
CVE-2017-17816
5.3 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
Recommended 4 products, the same list as for CVE-2017-11111
Threats
Impact low
CVE-2017-17817
5.3 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
Recommended 4 products, the same list as for CVE-2017-11111
Threats
Impact low
CVE-2017-17818
4.4 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2017-11111
Threats
Impact low
CVE-2017-17819
3.3 (Low)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2017-11111
Threats
Impact low
CVE-2017-17820
5.3 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
Recommended 4 products, the same list as for CVE-2017-11111
Threats
Impact low
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://www.suse.com/security/cve/CVE-2017-11111/ self
https://www.suse.com/security/cve/CVE-2017-14228/ self
https://www.suse.com/security/cve/CVE-2017-17810/ self
https://www.suse.com/security/cve/CVE-2017-17811/ self
https://www.suse.com/security/cve/CVE-2017-17812/ self
https://www.suse.com/security/cve/CVE-2017-17813/ self
https://www.suse.com/security/cve/CVE-2017-17814/ self
https://www.suse.com/security/cve/CVE-2017-17815/ self
https://www.suse.com/security/cve/CVE-2017-17816/ self
https://www.suse.com/security/cve/CVE-2017-17817/ self
https://www.suse.com/security/cve/CVE-2017-17818/ self
https://www.suse.com/security/cve/CVE-2017-17819/ self
https://www.suse.com/security/cve/CVE-2017-17820/ self
https://www.suse.com/security/cve/CVE-2017-11111 external
https://bugzilla.suse.com/1047925 external
https://bugzilla.suse.com/1073798 external
https://www.suse.com/security/cve/CVE-2017-14228 external
https://bugzilla.suse.com/1058013 external
https://www.suse.com/security/cve/CVE-2017-17810 external
https://bugzilla.suse.com/1073796 external
https://www.suse.com/security/cve/CVE-2017-17811 external
https://bugzilla.suse.com/1073798 external
https://www.suse.com/security/cve/CVE-2017-17812 external
https://bugzilla.suse.com/1073799 external
https://www.suse.com/security/cve/CVE-2017-17813 external
https://bugzilla.suse.com/1073803 external
https://www.suse.com/security/cve/CVE-2017-17814 external
https://bugzilla.suse.com/1073808 external
https://www.suse.com/security/cve/CVE-2017-17815 external
https://bugzilla.suse.com/1073818 external
https://www.suse.com/security/cve/CVE-2017-17816 external
https://bugzilla.suse.com/1073823 external
https://www.suse.com/security/cve/CVE-2017-17817 external
https://bugzilla.suse.com/1073829 external
https://www.suse.com/security/cve/CVE-2017-17818 external
https://bugzilla.suse.com/1073830 external
https://www.suse.com/security/cve/CVE-2017-17819 external
https://bugzilla.suse.com/1073832 external
https://www.suse.com/security/cve/CVE-2017-17820 external
https://bugzilla.suse.com/1073846 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "nasm-2.15.05-1.6 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the nasm-2.15.05-1.6 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-11075",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11075-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-11111 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-11111/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-14228 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-14228/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-17810 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-17810/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-17811 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-17811/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-17812 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-17812/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-17813 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-17813/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-17814 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-17814/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-17815 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-17815/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-17816 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-17816/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-17817 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-17817/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-17818 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-17818/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-17819 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-17819/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-17820 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-17820/"
      }
    ],
    "title": "nasm-2.15.05-1.6 on GA media",
    "tracking": {
      "current_release_date": "2026-09-20T20:10:48Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:11075-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T20:10:48Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nasm-0:2.15.05-1.6.aarch64",
                "product": {
                  "name": "nasm-0:2.15.05-1.6.aarch64",
                  "product_id": "nasm-0:2.15.05-1.6.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.15.05:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/nasm@2.15.05-1.6?arch=aarch64\u0026upstream=nasm-0:2.15.05-1.6.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nasm-0:2.15.05-1.6.ppc64le",
                "product": {
                  "name": "nasm-0:2.15.05-1.6.ppc64le",
                  "product_id": "nasm-0:2.15.05-1.6.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.15.05:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/nasm@2.15.05-1.6?arch=ppc64le\u0026upstream=nasm-0:2.15.05-1.6.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nasm-0:2.15.05-1.6.s390x",
                "product": {
                  "name": "nasm-0:2.15.05-1.6.s390x",
                  "product_id": "nasm-0:2.15.05-1.6.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.15.05:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/nasm@2.15.05-1.6?arch=s390x\u0026upstream=nasm-0:2.15.05-1.6.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nasm-0:2.15.05-1.6.x86_64",
                "product": {
                  "name": "nasm-0:2.15.05-1.6.x86_64",
                  "product_id": "nasm-0:2.15.05-1.6.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:nasm:netwide_assembler:2.15.05:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/nasm@2.15.05-1.6?arch=x86_64\u0026upstream=nasm-0:2.15.05-1.6.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nasm-0:2.15.05-1.6.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64"
        },
        "product_reference": "nasm-0:2.15.05-1.6.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nasm-0:2.15.05-1.6.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le"
        },
        "product_reference": "nasm-0:2.15.05-1.6.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nasm-0:2.15.05-1.6.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x"
        },
        "product_reference": "nasm-0:2.15.05-1.6.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nasm-0:2.15.05-1.6.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
        },
        "product_reference": "nasm-0:2.15.05-1.6.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-11111",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-11111"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-11111",
          "url": "https://www.suse.com/security/cve/CVE-2017-11111"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1047925 for CVE-2017-11111",
          "url": "https://bugzilla.suse.com/1047925"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1073798 for CVE-2017-11111",
          "url": "https://bugzilla.suse.com/1073798"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-11111"
    },
    {
      "cve": "CVE-2017-14228",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-14228"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-14228",
          "url": "https://www.suse.com/security/cve/CVE-2017-14228"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1058013 for CVE-2017-14228",
          "url": "https://bugzilla.suse.com/1058013"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-14228"
    },
    {
      "cve": "CVE-2017-17810",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-17810"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Netwide Assembler (NASM) 2.14rc0, there is a \"SEGV on unknown address\" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-17810",
          "url": "https://www.suse.com/security/cve/CVE-2017-17810"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1073796 for CVE-2017-17810",
          "url": "https://bugzilla.suse.com/1073796"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-17810"
    },
    {
      "cve": "CVE-2017-17811",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-17811"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-17811",
          "url": "https://www.suse.com/security/cve/CVE-2017-17811"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1073798 for CVE-2017-17811",
          "url": "https://bugzilla.suse.com/1073798"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-17811"
    },
    {
      "cve": "CVE-2017-17812",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-17812"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-17812",
          "url": "https://www.suse.com/security/cve/CVE-2017-17812"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1073799 for CVE-2017-17812",
          "url": "https://bugzilla.suse.com/1073799"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-17812"
    },
    {
      "cve": "CVE-2017-17813",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-17813"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-17813",
          "url": "https://www.suse.com/security/cve/CVE-2017-17813"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1073803 for CVE-2017-17813",
          "url": "https://bugzilla.suse.com/1073803"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-17813"
    },
    {
      "cve": "CVE-2017-17814",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-17814"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-17814",
          "url": "https://www.suse.com/security/cve/CVE-2017-17814"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1073808 for CVE-2017-17814",
          "url": "https://bugzilla.suse.com/1073808"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-17814"
    },
    {
      "cve": "CVE-2017-17815",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-17815"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-17815",
          "url": "https://www.suse.com/security/cve/CVE-2017-17815"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1073818 for CVE-2017-17815",
          "url": "https://bugzilla.suse.com/1073818"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-17815"
    },
    {
      "cve": "CVE-2017-17816",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-17816"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-17816",
          "url": "https://www.suse.com/security/cve/CVE-2017-17816"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1073823 for CVE-2017-17816",
          "url": "https://bugzilla.suse.com/1073823"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-17816"
    },
    {
      "cve": "CVE-2017-17817",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-17817"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-17817",
          "url": "https://www.suse.com/security/cve/CVE-2017-17817"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1073829 for CVE-2017-17817",
          "url": "https://bugzilla.suse.com/1073829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-17817"
    },
    {
      "cve": "CVE-2017-17818",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-17818"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in asm/preproc.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-17818",
          "url": "https://www.suse.com/security/cve/CVE-2017-17818"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1073830 for CVE-2017-17818",
          "url": "https://bugzilla.suse.com/1073830"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-17818"
    },
    {
      "cve": "CVE-2017-17819",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-17819"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skip_white_ calls are not validated.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-17819",
          "url": "https://www.suse.com/security/cve/CVE-2017-17819"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1073832 for CVE-2017-17819",
          "url": "https://bugzilla.suse.com/1073832"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-17819"
    },
    {
      "cve": "CVE-2017-17820",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-17820"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
          "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-17820",
          "url": "https://www.suse.com/security/cve/CVE-2017-17820"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1073846 for CVE-2017-17820",
          "url": "https://bugzilla.suse.com/1073846"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.aarch64",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.ppc64le",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.s390x",
            "openSUSE Tumbleweed:nasm-0:2.15.05-1.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-17820"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.