CVE catalog

CVE-2023-31722

NASM vulnerabilities

There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	nasm	sid	`3.01-1`	vulnerable
Debian	nasm	forky	`3.01-1`	vulnerable
Debian	nasm	trixie	`2.16.03-1`	vulnerable
Debian	nasm	bookworm	`2.16.01-1`	vulnerable
Ubuntu	nasm	noble	Not reported	vulnerable
Ubuntu	nasm	noble	`2.16.01-1ubuntu0.1~esm1`	fixed
Ubuntu	nasm	pro	`2.16.01-1`	vulnerable
Ubuntu	nasm	pro	`2.16.01-1build1`	vulnerable
Ubuntu	nasm	pro	`2.16.01-1ubuntu0.1~esm1`	fixed
Ubuntu	nasm	25.10	`2.16.03-1`	vulnerable

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	nasm	source	sid	`(unfixed)`	unimportant	Not reported	Not reported
Debian	nasm	source	forky	`(unfixed)`	unimportant	Not reported	Not reported
Debian	nasm	source	trixie	`(unfixed)`	unimportant	Not reported	Not reported
Debian	nasm	source	bookworm	`(unfixed)`	unimportant	Not reported	Not reported
Ubuntu	nasm	deb	noble	`2.16.01-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	nasm	deb	pro	`2.16.01-1ubuntu0.1~esm1`	Not reported	UBUNTU-CVE-2023-31722	Not reported

Matching against OpenFactory catalog package versions is in progress.