This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-24978 →

DEBIAN-CVE-2020-24978

In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7...

Original description

The description as published by the source.

In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 nasm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.04-1"}]}]

Debian:13 nasm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.04-1"}]}]

Debian:14 nasm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.04-1"}]}]

References

advisory security-tracker.debian.org