CVE-2017-17815

In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.

• CWE-754

• http://repo.or.cz/nasm.git/commit/c9244eaadd05b27637cde06021bac3fa1d920aa3Patch, Vendor Advisory
• https://bugzilla.nasm.us/show_bug.cgi?id=3392436Exploit, Issue Tracking, Vendor Advisory
• https://usn.ubuntu.com/3694-1/Third Party Advisory
• http://repo.or.cz/nasm.git/commit/c9244eaadd05b27637cde06021bac3fa1d920aa3Patch, Vendor Advisory
• https://bugzilla.nasm.us/show_bug.cgi?id=3392436Exploit, Issue Tracking, Vendor Advisory
• https://usn.ubuntu.com/3694-1/Third Party Advisory

Published

Dec 21, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17809In Golden Frog VyprVPN before 2.15.0.5828 for macOS, the vyp…
• CVE-2017-17810In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unk…
• CVE-2017-17811In Netwide Assembler (NASM) 2.14rc0, there is a heap-based b…
• CVE-2017-17812In Netwide Assembler (NASM) 2.14rc0, there is a heap-based b…
• CVE-2017-17813In Netwide Assembler (NASM) 2.14rc0, there is a use-after-fr…
• CVE-2017-17814In Netwide Assembler (NASM) 2.14rc0, there is a use-after-fr…
• CVE-2017-17816In Netwide Assembler (NASM) 2.14rc0, there is a use-after-fr…
• CVE-2017-17817In Netwide Assembler (NASM) 2.14rc0, there is a use-after-fr…
• CVE-2017-17818In Netwide Assembler (NASM) 2.14rc0, there is a heap-based b…
• CVE-2017-17819In Netwide Assembler (NASM) 2.14rc0, there is an illegal add…
• CVE-2017-17820In Netwide Assembler (NASM) 2.14rc0, there is a use-after-fr…
• CVE-2017-17821WTF/wtf/FastBitVector.h in WebKit, as distributed in Safari …